Common HIPAA violations, enforcement cases, and how to avoid compliance failures
In 2018, a small Texas health system called MD Anderson Cancer Center lost three unencrypted devices containing patient records. The result? A $4.3 million
A $4.3 Million Settlement Started with a Single Complaint In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted USB drive
Last year, a woman in Ohio told me she'd spent three months trying to figure out how to report her dentist's
A woman in California walked into her pharmacy and discovered that an employee had accessed her prescription records — not to fill a prescription, but out
A single stolen laptop cost the University of Texas MD Anderson Cancer Center over $4.3 million in civil monetary penalties. Three unencrypted devices. No
A Single Stolen Laptop Cost This Health System $3.9 Million In 2018, the University of Rochester Medical Center (URMC) settled with the Office for
In 2018, a small dermatology practice in Massachusetts agreed to pay $150,000 to the Office for Civil Rights after a physician threw patient records
In February 2023, Banner Health agreed to pay $1.25 million to the Office for Civil Rights after a breach exposed the ePHI of nearly
A nurse at a large hospital system picks up the phone and reads a patient's HIV status to the wrong family member. No
In February 2023, Banner Health agreed to pay $1.25 million to the Office for Civil Rights after a breach exposed the electronic protected health
A Nurse, a Hallway, and a $4.75 Million Settlement In 2021, a major health system paid $4.75 million to settle allegations from the
In 2018, a small dermatology practice in Massachusetts called Adult & Pediatric Dermatology, P.C. paid $150,000 to settle a HIPAA case. The trigger?
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.