A collection of 47 posts
A front-desk receptionist at a Florida orthopedic clinic looked up her ex-husband's new girlfriend in the EHR. She didn't download anything.
The HR Director Who Shared Too Much Last year, an HR director at a mid-sized manufacturing company forwarded an employee's medical leave documentation
In February 2023, Banner Health paid $1.25 million to settle allegations that it failed to conduct an enterprise-wide risk analysis — a core requirement of
A hospital in Louisiana lost $480,000 because a single employee snooped through a patient's medical record out of curiosity. Not a hacker.
Last year, I watched a three-physician practice in the Midwest spend eleven months fighting an OCR investigation — without a lawyer for the first four. By
In 2018, a small dermatology practice in Massachusetts called Adult & Pediatric Dermatology, P.C. paid $150,000 to settle a HIPAA case. The trigger?
A Single Complaint to the Wrong Agency Can Cost You Months I got a call last year from a clinic administrator who had filed a
A hospital employee in Texas looks up her ex-husband's medical records out of curiosity. A dental office in Georgia tosses paper charts into
A $4.75 Million Wake-Up Call from an Agency You've Probably Underestimated In 2024, the Office for Civil Rights slapped a $4.75
A $4.75 Million Invoice Nobody Expected In 2022, a cancer care center in Indiana opened an envelope from HHS that changed everything. The Centers
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting over 2.81 million individuals exposed systemic failures in
In February 2024, a small dental practice in New England agreed to a $50,000 settlement with the Office for Civil Rights after a former
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.