A collection of 29 posts
In 2023, OCR settled with a business associate that failed to ensure its subcontractors had proper safeguards in place for protected health information. The penalty
Every month, patients contact OCR after discovering a hospital shared their medical records without authorization, a business associate lost a laptop containing thousands of patient
In 2023, OCR settled with a Louisiana medical group for $480,000 after a former employee accessed patient records without authorization for months — and no
In 2023, a mid-size California medical group agreed to a $240,000 settlement with OCR after an employee accessed patient records without authorization for over
In 2018, MD Anderson Cancer Center lost a $4.3 million appeal over HIPAA violations that hinged on provisions strengthened by the HITECH Act. The
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.