Common HIPAA violations, enforcement cases, and how to avoid compliance failures
A single stolen laptop cost the University of Texas MD Anderson Cancer Center over $4.3 million in civil monetary penalties. Three unencrypted devices. No
A Single Stolen Laptop Cost This Health System $3.9 Million In 2018, the University of Rochester Medical Center (URMC) settled with the Office for
In 2018, a small dermatology practice in Massachusetts agreed to pay $150,000 to the Office for Civil Rights after a physician threw patient records
In February 2023, Banner Health agreed to pay $1.25 million to the Office for Civil Rights after a breach exposed the ePHI of nearly
A nurse at a large hospital system picks up the phone and reads a patient's HIV status to the wrong family member. No
In February 2023, Banner Health agreed to pay $1.25 million to the Office for Civil Rights after a breach exposed the electronic protected health
A Nurse, a Hallway, and a $4.75 Million Settlement In 2021, a major health system paid $4.75 million to settle allegations from the
In 2018, a small dermatology practice in Massachusetts called Adult & Pediatric Dermatology, P.C. paid $150,000 to settle a HIPAA case. The trigger?
A receptionist at a dental clinic forwarded a spreadsheet of patient names, Social Security numbers, and insurance IDs to her personal Gmail account so she
Jobs. Licenses. Freedom. Reputations built over decades. Healthcare workers across the country are destroying their careers—sometimes in seconds—with social media posts they never imagined would cost them everything.
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting over 2.81 million individuals exposed systemic failures in
In February 2024, OCR settled with a healthcare provider for $480,000 after an investigation revealed systemic failures to comply with the HIPAA Privacy Rule
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.