A collection of 16 posts
A front-desk receptionist at a Florida orthopedic clinic looked up her ex-husband's new girlfriend in the EHR. She didn't download anything.
A hospital employee in Texas looks up her ex-husband's medical records out of curiosity. A dental office in Georgia tosses paper charts into
In 2019, OCR launched its HIPAA Right of Access Initiative — and since then, it has settled more than 45 enforcement actions specifically targeting organizations that
In January 2024, OCR settled with a healthcare system for $4.75 million after investigators found the organization had failed to conduct an enterprise-wide risk
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million patients. The root cause wasn'
A nurse finishes a difficult shift and, over dinner with friends, recounts a dramatic case from the ER — the injuries, the treatment, the patient'
In 2023, a Florida hospital system paid $1.3 million after a former employee accessed the protected health information of over 1,500 patients without
In January 2024, a medical receptionist in Texas discovered her supervisor was accessing patient records for personal reasons — looking up neighbors, family members, even local
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affected nearly 3 million patients — the result of insufficient access
In February 2023, OCR settled with Banner Health for $1.25 million after a phishing attack exposed the protected health information of nearly 3 million
Every month, patients contact OCR after discovering a hospital shared their medical records without authorization, a business associate lost a laptop containing thousands of patient
In 2023, OCR settled with a Louisiana medical group for $480,000 after a former employee accessed patient records without authorization for months — and no
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.