HIPAA Laws: What Most Organizations Still Get Wrong
A hospital in Louisiana lost $480,000 because a single employee snooped through a patient's medical record out of curiosity. Not a hacker.
A collection of 32 posts
A hospital in Louisiana lost $480,000 because a single employee snooped through a patient's medical record out of curiosity. Not a hacker.
Last year, I watched a three-physician practice in the Midwest spend eleven months fighting an OCR investigation — without a lawyer for the first four. By
In 2018, a small dermatology practice in Massachusetts called Adult & Pediatric Dermatology, P.C. paid $150,000 to settle a HIPAA case. The trigger?
A Single Complaint to the Wrong Agency Can Cost You Months I got a call last year from a clinic administrator who had filed a
A hospital employee in Texas looks up her ex-husband's medical records out of curiosity. A dental office in Georgia tosses paper charts into
A $4.75 Million Wake-Up Call from an Agency You've Probably Underestimated In 2024, the Office for Civil Rights slapped a $4.75
A $4.75 Million Invoice Nobody Expected In 2022, a cancer care center in Indiana opened an envelope from HHS that changed everything. The Centers
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting over 2.81 million individuals exposed systemic failures in
In February 2024, a small dental practice in New England agreed to a $50,000 settlement with the Office for Civil Rights after a former
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a hospital employee sold protected health information (PHI) of over
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee sold protected health information of over 12,
In 2023, a Florida hospital system paid $1.3 million after a former employee accessed the protected health information of over 1,500 patients without
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.