HIPAA regulations, compliance requirements, and violation prevention
In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had no documented HIPAA training program — despite operating for
In 2023, OSHA issued over $4.3 million in penalties to healthcare facilities for violations ranging from bloodborne pathogen exposure to inadequate hazard communication. What
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over
In 2023, a dental practice in New England paid over $50,000 to settle an OCR investigation triggered by a single unencrypted email containing patient
In February 2024, OCR settled with a healthcare system for $4.75 million after a phishing attack compromised the protected health information of over 100,
In 2023, OCR settled with a dental practice in New England for $23,000 after an investigation revealed, among other violations, that the practice had
A mid-sized dental practice in the Southeast received citations from both OSHA and OCR within the same calendar year — one for failing to maintain a
A medical practice manager recently told me her staff assumed that because they completed annual OSHA bloodborne pathogen training, they had also satisfied their HIPAA
In 2023, OCR settled with a dental practice in Massachusetts for $350,000 after an investigation revealed not only HIPAA Security Rule failures but overlapping
In 2023, a mid-sized dental practice in Texas was hit with two separate enforcement actions within the same quarter — one from OSHA for failing to
In 2023, a mid-sized dental practice in Ohio received citations from both OSHA and OCR within the same six-month period. The OSHA citation targeted inadequate
In 2023, a small dermatology practice in the Southeast received citations from both OSHA and OCR within the same quarter. The OSHA violation involved improper
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.