Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
In 2023, the Department of Health and Human Services Office of Inspector General (OIG) reported over $3.6 billion in expected recoveries from healthcare fraud
A behavioral health clinic in Connecticut received a $125,000 penalty from OCR after disclosing a spreadsheet of patient data that staff believed was "
Why a Single Patient Identifier Triggers Full HIPAA Protection In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation
In 2023, the Department of Justice recovered over $2.68 billion in healthcare fraud settlements and judgments — a significant portion tied to Anti-Kickback Statute (AKS)
In December 2023, OCR settled with a healthcare system for $480,000 after an investigation revealed workforce members had been emailing unencrypted patient information to
In 2023, OCR settled a case with a dental management company — not a dentist, not a hospital, but an administrative services firm — for $350,000
A nurse finishes a difficult shift and, over dinner with friends, recounts a dramatic case from the ER — the injuries, the treatment, the patient'
In 2023, OCR settled with a covered entity for $1.3 million after workforce members disclosed protected health information to unauthorized individuals — people who seemed
In December 2023, OCR issued its largest-ever HIPAA settlement — a $4.75 million penalty against Montefiore Medical Center after a workforce member stole protected health
In 2023, a Florida hospital system paid $1.3 million after a former employee accessed the protected health information of over 1,500 patients without
In 2023, the Department of Justice recovered over $2.68 billion in settlements and judgments related to healthcare fraud. Behind that staggering number is a
When OCR settled with a major health system in 2017 for $2.5 million after a breach involving an unencrypted laptop containing protected health information
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.