A collection of 4 posts
A hospital compliance officer once told me she spent three months building an elaborate minimum necessary policy — role-based access matrices, tiered authorization levels, the works.
A hospital employee in Texas pulled up the medical records of 4,000 patients she had no clinical reason to access. She was checking on
A hospital employee in Texas pulls up a patient's full medical record to verify an insurance code. She only needs the diagnosis and
In 2023, OCR settled with a covered entity for over $1.2 million after an investigation revealed that workforce members routinely accessed full patient records
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.