HIPAA Rules
HIPAA Rules: What Most Organizations Still Get Wrong
A Single Fax Machine Cost This Hospital $4.8 Million In 2019, a fax at NewYork-Presbyterian Hospital sent a patient's PHI to the
Tag
HIPAA Privacy Rule
Content about HIPAA Privacy Rule requirements and training.
HIPAA Training
HIPAA Employee Training Requirements: What OCR Expects
In 2024, OCR settled with a healthcare provider for $40,000 after an investigation revealed that multiple workforce members had never received HIPAA training — despite
HIPAA Privacy Rule
HIPAA Gives Privacy Protection For: Who Is Actually Covered
In 2023, OCR settled with a dental practice in New England for $50,000 after a patient filed a complaint that the practice had disclosed
HIPAA Health
HIPAA Health: How Compliance Protects Patient Care
In February 2024, OCR announced a $4.75 million settlement with a nonprofit health system that failed to conduct an enterprise-wide risk analysis — a failure
HIPAA Identifiable Information
HIPAA Identifiable Information: What Qualifies as PHI
In 2023, a dental practice in New England received a six-figure penalty from OCR after posting appointment reminders on a public-facing scheduling platform that exposed
HIPAA in a Nutshell
HIPAA in a Nutshell: What Every Healthcare Org Must Know
In 2023 alone, OCR settled or imposed civil money penalties in cases totaling over $4 million — and the majority involved failures that any organization with
HIPAA Basics
HIPAA Is Also Referred to as the Kennedy-Kassebaum Act
When OCR issues a corrective action plan or levies a six-figure penalty, the enforcement letter doesn't reference some obscure regulation — it cites the
HIPAA Mandate
HIPAA Mandate: What Your Organization Must Do Now
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over
HIPAA New Rules
HIPAA New Rules: What Your Organization Must Do Now
In December 2023, the HHS Office for Civil Rights published a Notice of Proposed Rulemaking (NPRM) that would represent the most significant overhaul of the
Notice of Privacy Practices
HIPAA Notice of Privacy Practices Requirements Explained
In 2022, OCR settled with a dental practice in New England for $30,000 after an investigation revealed — among other violations — that the practice had
HIPAA Omnibus Final Rule
HIPAA Omnibus Final Rule: What It Changed and Why It Still Matters
When OCR announced a $4.8 million settlement with New York-Presbyterian Hospital and Columbia University in 2014, the enforcement action underscored a regulatory landscape that
HIPAA Privacy Rule
HIPAA Privacy and Security Rule: What Your Organization Must Know
In February 2024, OCR settled with a healthcare system for $4.75 million after investigators found the organization had failed to conduct an enterprise-wide risk