A collection of 9 posts
A hospital system in New York handed HHS investigators a three-ring binder full of policies during an audit. The binder looked impressive — hundreds of pages,
That Stack of Forms Your Front Desk Hands Out? It Might Be Wrong. I once walked into a three-provider medical practice in Georgia and asked
A physician's office in Connecticut handed every new patient a single sheet of paper labeled "HIPAA Form" at the front desk.
When OCR investigated a midsize hospital system in 2023, investigators didn't just ask about the breach itself — they asked for six years of
In 2023, OCR settled with a dental practice in New England for $50,000 after investigators discovered the organization had failed to provide patients with
In 2023, a mid-sized clinic in the Southeast received a records request from OCR during a compliance review — and couldn't produce its risk
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had no documentation of its risk analysis, policies,
When OCR investigators arrive at a covered entity's door — whether triggered by a patient complaint or a reported breach — the first thing they
Every year, thousands of people search for hippa policies — a common misspelling of HIPAA, the Health Insurance Portability and Accountability Act. Whether you arrived here
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.