Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
A hospital in Texas once sent a spreadsheet of 3,400 patient records to a business associate — with every column of identifying data still intact.
A billing company in Tennessee lost $2.3 million because its leadership believed HIPAA was a hospital problem, not theirs. CHSPSC LLC, a management company
A $4.3 Million Penalty Started With One Untrained Employee In 2019, the University of Texas MD Anderson Cancer Center lost its appeal of a
A patient in the waiting room overhears a nurse call out another patient's name. A fax containing lab results lands on a shared
Your Chatbot Just Became a Liability A nurse pastes a patient's medication list into an AI chatbot to draft a care summary. It
A Receptionist, a Curiosity, and a $2.4 Million Problem In 2018, the University of Texas MD Anderson Cancer Center lost its appeal of a
A mid-size pediatric health network migrated to a popular cloud platform in 2022. They configured the servers, encrypted the data at rest, and assumed they
A front-desk receptionist at a Florida orthopedic clinic looked up her ex-husband's new girlfriend in the EHR. She didn't download anything.
A $4.75 Million Wake-Up Call for Organizations That Thought They Were Covered In 2023, Banner Health paid $1.25 million to settle with OCR
You're Searching for a "HIPPA Privacy Form" — Let's Fix That First Every week, thousands of people search for a
The Missing Signature That Cost a Health System $4.3 Million In 2016, Advocate Health Care Network settled with the Office for Civil Rights (OCR)
The $4.3 Million Mistake That Started With One Wrong Assumption In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.