PHI
PHI in Healthcare Meaning: What Counts as Protected Data
In 2023, OCR settled with a dental practice in New England for $50,000 after it disclosed patient records to a third-party marketing firm without
Tag
HIPAA Privacy Rule
Content about HIPAA Privacy Rule requirements and training.
PHI
PHI in Written or Verbal Form: What HIPAA Requires
In 2022, a dental practice in New England received a corrective action from OCR after an employee discussed a patient's treatment plan loudly
PHI Protection
PHI Must Be Protected in All Forms Except: Myth vs. Rule
A compliance officer at a mid-size clinic recently told me her staff believed that PHI must be protected in all forms except verbal conversations — that
HIPAA Privacy Rule
Privacy vs Security Rule HIPAA: Key Differences Explained
In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had addressed its Privacy Rule obligations but had done
Release of Information
Release of Information HIPAA Rules You Must Follow
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization failed to provide a patient timely access to their
Safe Harbor Method
Safe Harbor Method HIPAA: De-Identification Guide
In 2023, OCR investigated a research institution that published a dataset it believed was fully de-identified — only to discover that zip codes and dates of
Mental Health Records
Subpoena Mental Health Records: HIPAA Rules You Must Know
A mid-size behavioral health practice in the Southeast received a subpoena demanding the complete treatment records of a current patient involved in a custody dispute.
Notice of Privacy Practices
The Blank Describes How PHI May Be Used Under HIPAA
If you've encountered the question "the blank describes how PHI may be used" in a HIPAA training module or certification exam,
OCR Enforcement
The HHS Office for Civil Rights Is Charged with Protecting PHI
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of 12,
HIPAA Compliance
The Importance of HIPAA: What Every Healthcare Org Must Know
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed massive gaps in risk
Minimum Necessary Standard
The Minimum Necessary Rule Refers To: A Practical Guide
In 2022, OCR settled with a dental practice for $25,000 after an investigation revealed the organization had disclosed an entire patient medical record to
Minimum Necessary Standard
The Minimum Necessary Standard Means To Limit PHI Access
In 2023, OCR settled with a covered entity for over $100,000 after an investigation revealed that employees were routinely accessing patient records unrelated to