HITECH Act
What Is HIPAA HITECH Act and Why It Changed Enforcement
In February 2011, Cignet Health of Prince George's County, Maryland received a $4.3 million civil money penalty from the Office for Civil
Tag
HIPAA Training
HIPAA compliance training resources and best practices for healthcare professionals
HITECH Act
What Is HITECH and HIPAA? How These Laws Work Together
When Advocate Medical Group paid $5.55 million to settle HIPAA violations in 2016, the penalty wasn't calculated under the original 1996 HIPAA
Notice of Privacy Practices
What Is Notice of Privacy Practices Under HIPAA?
In 2022, a small dental practice in the Southeast received a corrective action letter from the Office for Civil Rights (OCR) after a patient complaint
PHI
What Is PHI in Healthcare? A Compliance Guide
In 2023, OCR settled with a dental practice for $350,000 after it disclosed patient diagnoses in response to negative online reviews. The information shared
HITECH Act
What Was the Primary Goal of the HITECH Act?
In 2009, the Department of Health and Human Services reported that fewer than 10% of U.S. hospitals had adopted even a basic electronic health
PHI
What's Considered PHI Under HIPAA: A Practical Guide
In 2023, OCR settled with a dental practice for $350,000 after an impermissible disclosure involving patient appointment data — information the practice didn't
HIPAA Implementation
When Was HIPAA Implemented? Key Dates That Shape Compliance
In 2023, OCR settled with a dental practice for $350,000 over Security Rule violations that had persisted since 2016 — failures the practice might have
HIPAA History
When Was HIPAA Started? Key Dates Every CE Must Know
In 2023, OCR settled with Banner Health for $1.25 million after a breach affecting over 2.81 million individuals — a case that hinged on
HIPAA Certification
Where Can I Get HIPAA Certification? A Compliance Expert's Guide
Every week, at least one compliance officer or new hire sends me some version of the same question: where can I get HIPAA certification? The
HIPAA Enforcement
Which Governmental Entity Is Responsible for Enforcing HIPAA
In February 2023, the Office for Civil Rights settled with a dental practice in New England for $30,000 after the organization failed to provide
Protected Health Information
Which Is Not Considered Protected Health Information
In 2023, OCR settled with a covered entity for $1.3 million after an investigation revealed the organization had misclassified certain data as non-PHI — and
HIPAA Safeguards
Which of the Following Is Not a HIPAA Safeguard?
Every year, OCR investigations reveal the same pattern: organizations that misidentify what HIPAA actually requires end up with the most damaging audit findings. One of