Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
In 2011, a small cardiology practice in Phoenix switched from paper charts to an electronic health record system. Within six months, an unencrypted laptop containing
A $4.3 Million Wake-Up Call Buried in an EHR Audit Log In 2023, the University of Texas MD Anderson Cancer Center lost its years-long
In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3 million appeal after OCR found that unencrypted laptops and thumb drives
A $5.1 Million Penalty That Started with a Simple Question In 2017, Memorial Healthcare System in Florida agreed to pay $5.1 million to
A hospital employee in Texas looks up her ex-husband's medical records out of curiosity. A dental office in Georgia tosses paper charts into
A Mother Couldn't Get Her Own Son's Medical Records — Then the Feds Got Involved In 2019, a small medical practice in
A scheduling coordinator at a mid-size orthopedic practice pulled a patient's full medical record — psychiatric notes, HIV status, substance abuse history — just to
The CEO Who Learned HIPAA the Hard Way In 2018, the owner of a small health plan called Filefax agreed to pay $100,000 to
A $4.75 Million Wake-Up Call That Started With One Unencrypted Laptop In 2014, New York-Presbyterian Hospital and Columbia University paid a combined $4.8
A receptionist at a busy cardiology practice in Texas forwarded a patient's insurance form to her personal Gmail account. She wasn't
A receptionist at a dental clinic forwarded a spreadsheet of patient names, Social Security numbers, and insurance IDs to her personal Gmail account so she
A Fax Machine, a $4.75 Million Penalty, and Why HIPAA Still Catches Organizations Off Guard In 2020, a large health system called Premera Blue
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.