A collection of 13 posts
The Filing Cabinet That Cost a Hospital $2.3 Million In 2018, Cottage Health in California settled with the Office for Civil Rights (OCR) for
Last year, I reviewed the compliance binder for a mid-sized cardiology practice in Texas. The office manager was proud of it — three inches thick, color-coded
A Stack of Unsigned Forms Doesn't Mean You're Compliant I walked into a pediatric clinic last year and asked to see
Let me save you some trouble: the forms you're searching for when you type "hippa forms" are actually called HIPAA forms
A hospital system in New York handed HHS investigators a three-ring binder full of policies during an audit. The binder looked impressive — hundreds of pages,
That Stack of Forms Your Front Desk Hands Out? It Might Be Wrong. I once walked into a three-provider medical practice in Georgia and asked
A physician's office in Connecticut handed every new patient a single sheet of paper labeled "HIPAA Form" at the front desk.
When OCR investigated a midsize hospital system in 2023, investigators didn't just ask about the breach itself — they asked for six years of
In 2023, OCR settled with a dental practice in New England for $50,000 after investigators discovered the organization had failed to provide patients with
In 2023, a mid-sized clinic in the Southeast received a records request from OCR during a compliance review — and couldn't produce its risk
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had no documentation of its risk analysis, policies,
When OCR investigators arrive at a covered entity's door — whether triggered by a patient complaint or a reported breach — the first thing they
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.