Content about federal HIPAA training requirements for covered entities.
A small pediatric clinic in Colorado thought they had HIPAA handled. They'd trained their staff once — back in 2014. When OCR came knocking
The Spreadsheet That Cost a Health System $4.3 Million In 2023, Yakima Valley Memorial Hospital settled with OCR for $240,000 after 23 security
A $4.3 Million Wake-Up Call in a Hospital Basement In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted USB drive
In January 2013, HHS dropped the largest single regulatory update in HIPAA's history — and most organizations still haven't fully absorbed what
A hospital executive stared at a $4.3 million settlement notice and realized the breach could have been prevented with a single encrypted laptop. That&
The Clinic That Had 47 Policies and Zero Compliance Last year I walked into a mid-sized orthopedic practice that proudly handed me a three-ring binder.
A $4.3 Million Penalty Started With One Untrained Employee In 2019, the University of Texas MD Anderson Cancer Center lost its appeal of a
A hospital receptionist in Texas forwarded a patient's lab results to the wrong email address. It took fourteen seconds. The breach affected one
A pediatric nonprofit in Idaho lost $387,200 because one employee — one — opened a phishing email and exposed the ePHI of 10,000 patients. When
A receptionist at a cancer clinic in Florida forwarded a spreadsheet of 1,200 patient names, diagnoses, and Social Security numbers to her personal Gmail
The Penalty That Started With an Untrained Receptionist In 2018, Cottage Health paid $3 million to settle with HHS after a breach exposed over 62,
A radiology technician at a hospital in New York forwarded a patient's imaging report to her personal Gmail account so she could "
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.