Patient Rights
What Are the Six Patient Rights Under the Privacy Rule
In 2023, OCR settled with a dental practice in New England for $50,000 after it failed to provide a patient with a copy of
Tag
HIPAA Training
HIPAA compliance training resources and best practices for healthcare professionals
HIPAA Omnibus Rule
What Did the HIPAA Omnibus Rule Do? Key Changes
In January 2013, the Department of Health and Human Services published a final rule that fundamentally reshaped HIPAA enforcement — and many healthcare organizations are still
PHI
What Do the Letters PHI Stand For in HIPAA?
In 2023, OCR settled with a dental practice in New England for $50,000 after an investigation revealed that front-desk staff had been disclosing patient
HIPAA Basics
What Does HIPAA Mean? A Compliance Expert Explains
In 2024, OCR settled a HIPAA enforcement case with Montefiore Medical Center for $4.75 million after a workforce member stole protected health information on
HIPAA Compliance
What Information Is Not Protected by HIPAA
A hospital's HR department shared an employee's sick leave records with a manager, and the employee filed a complaint with the
HIPAA HITECH
What Is HIPAA HITECH and Why It Changed Compliance
In February 2011, Massachusetts General Hospital paid $1 million to settle HIPAA violations involving the loss of protected health information for 192 patients. What made
HITECH Act
What Is HIPAA HITECH Act and Why It Changed Enforcement
In February 2011, Cignet Health of Prince George's County, Maryland received a $4.3 million civil money penalty from the Office for Civil
HITECH Act
What Is HITECH and HIPAA? How These Laws Work Together
When Advocate Medical Group paid $5.55 million to settle HIPAA violations in 2016, the penalty wasn't calculated under the original 1996 HIPAA
Notice of Privacy Practices
What Is Notice of Privacy Practices Under HIPAA?
In 2022, a small dental practice in the Southeast received a corrective action letter from the Office for Civil Rights (OCR) after a patient complaint
PHI
What Is PHI in Healthcare? A Compliance Guide
In 2023, OCR settled with a dental practice for $350,000 after it disclosed patient diagnoses in response to negative online reviews. The information shared
HITECH Act
What Was the Primary Goal of the HITECH Act?
In 2009, the Department of Health and Human Services reported that fewer than 10% of U.S. hospitals had adopted even a basic electronic health
PHI
What's Considered PHI Under HIPAA: A Practical Guide
In 2023, OCR settled with a dental practice for $350,000 after an impermissible disclosure involving patient appointment data — information the practice didn't