HIPAA Security Rule
The HIPAA Security Rule's Broader Objectives Explained
In 2018, the University of Texas MD Anderson Cancer Center lost a Supreme Court appeal and got stuck with a $4.3 million penalty — all
Tag
OCR Enforcement
Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
HIPAA Security Compliance
HIPAA Security Compliance: What Most Orgs Get Wrong
A $4.75 Million Fine Started with One Missing Risk Analysis In 2023, Banner Health agreed to a $1.25 million settlement with OCR after
HIPAA Privacy Rule
What Are the Privacy Rules of HIPAA? A Real-World Guide
A Nurse, a Hallway, and a $387,200 Penalty In 2019, the Office for Civil Rights settled with a medical center in Tennessee after staff
PHI
PHI Protected Health Information: What Counts and What Doesn't
A front-desk employee at a pediatric clinic in Texas mentioned a patient's diagnosis to the child's school counselor over the phone.
HIPAA Training Materials
HIPAA Training Materials: What Actually Works in 2026
A cardiologist's office in New York paid $100,000 to settle with OCR after a single employee left PHI visible on a computer
HIPAA Policy
Sample HIPAA Policy: What to Include and What to Skip
That 47-Page Policy Binder Gathering Dust on Your Shelf? OCR Doesn't Care About It Either. I once reviewed a sample HIPAA policy packet
HIPAA Compliance
HIIPA Compliant? Fix the Spelling, Then Fix Your Program
You Searched "HIIPA Compliant" — Here's Why That Matters More Than You Think I see it in emails from clinic managers, in
HIPAA Violations
Consequences of Violating HIPAA: What Actually Happens
A nurse in Tennessee pulls up her ex-husband's medical records out of curiosity. She doesn't share them. She doesn't
HIPAA Basics
Does HIPAA Apply to Private Individuals? The Truth
A woman in Ohio once called the HHS Office for Civil Rights to file a complaint against her neighbor. The neighbor, she claimed, had told
HIPAA Three Rules
HIPAA Three Rules: What Every Covered Entity Must Know
A small dermatology practice in Massachusetts lost an unencrypted thumb drive in 2019. It contained the ePHI of 2,200 patients. When HHS investigated, they
HIPAA Patients Rights
HIPAA Patients Rights: What Your Practice Owes Every Person Who Walks In
A Woman in Texas Waited 13 Months for Her Own Medical Records She asked politely. Then she asked again. Then she filed a complaint with
HIPAA Privacy Form
HIPAA Privacy Form: What It Must Include in 2026
A Stack of Unsigned Forms Doesn't Mean You're Compliant I walked into a pediatric clinic last year and asked to see