HIPAA Privacy Rule
When Can a Covered Entity Disclose PHI Legally?
In 2023, OCR settled with a dental practice for $350,000 after the organization disclosed a patient's protected health information to a third-party
Tag
Minimum Necessary Standard
A collection of 17 posts
PHI Access
Who Can Have Access to a Patient's PHI Under HIPAA
In 2023, OCR settled with a medical practice for $50,000 after an unauthorized employee accessed patient records with no treatment, payment, or operational justification.
HIPAA Need to Know
HIPAA Need to Know: The Minimum Necessary Standard
In 2023, OCR settled with a health system for $1.3 million after an investigation revealed that employees across multiple departments had unrestricted access to
PHI Identifiers
PHI Identifiers HIPAA: The 18 Data Elements You Must Protect
In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed that protected health information — including names, dates of
Protected Health Information
What Info Is Protected by HIPAA: A Practical Guide
In 2023, OCR settled with a dental practice in New England for $23,000 after an investigation revealed the organization had disclosed patient appointment information