A collection of 16 posts
A hospital billing clerk in Texas pulls up a patient's full medical record — psychiatric notes, HIV status, substance abuse history — just to verify
A Receptionist, a Curiosity, and a $2.4 Million Problem In 2018, the University of Texas MD Anderson Cancer Center lost its appeal of a
A scheduling coordinator at a mid-size orthopedic practice pulled a patient's full medical record — psychiatric notes, HIV status, substance abuse history — just to
In February 2024, OCR settled with a New England health system for $1.3 million after investigators found that staff had been accessing patient records
A mid-size hospital system in the Midwest allowed its entire billing department unrestricted access to complete patient medical records — including clinical notes, mental health histories,
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization failed to provide a patient timely access to their
In 2022, OCR settled with a dental practice for $25,000 after an investigation revealed the organization had disclosed an entire patient medical record to
In 2023, OCR settled with a covered entity for over $100,000 after an investigation revealed that employees were routinely accessing patient records unrelated to
In February 2024, OCR settled with a New England dermatology practice for $300,640 after investigators found the organization had no policies implementing basic Privacy
In 2023, OCR settled with a major health plan for $1.3 million after an investigation revealed the plan had used enrollee protected health information
In 2022, a specialty clinic in the Midwest disclosed an entire patient record — surgical history, psychiatric notes, billing details — to an employer conducting a routine
In 2023, OCR settled with a dental practice for $350,000 after the organization disclosed a patient's protected health information to a third-party
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.