Common HIPAA violations, enforcement cases, and how to avoid compliance failures
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a workforce member stole protected health information (PHI) of over
In February 2024, OCR announced a $4.75 million settlement with a healthcare system that failed to conduct an enterprise-wide risk analysis — a fundamental gap
In February 2024, OCR settled with a New England dermatology practice for $300,000 after determining the organization had disclosed protected health information to a
In 2023, a mid-sized employer's HR department forwarded an employee's medical certification for FMLA leave to the employee's direct
In February 2023, Banner Health agreed to a $1.25 million settlement with the Office for Civil Rights after a 2016 breach exposed the protected
In 2019, the Office for Civil Rights (OCR) launched its HIPAA Right of Access Initiative — and since then, it has settled or imposed penalties in
In 2023, a regional health system paid $850,000 to settle an OCR investigation that traced a data breach back to a single unsecured text
In 2024, a regional pharmacy chain paid $1.5 million to settle allegations with the HHS Office for Civil Rights after workforce members improperly accessed
In 2022, a specialty clinic in the Midwest faced an OCR complaint after a staff member left a detailed voicemail on a patient's
In 2023, a hospital system in the Midwest terminated a compliance analyst who reported suspected HIPAA violations to the Office for Civil Rights. The organization
In 2022, a Texas dental practice paid a $10,000 settlement after a staff member posted a patient's before-and-after photos on Instagram — without
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting over 2.81 million individuals exposed systemic failures in
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.