Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
In 2023, OCR settled with a dental practice in New England for $50,000 after an investigation revealed that no member of the workforce — including
When a dental practice in the Southeast received citations from both OSHA and OCR within the same quarter, the owner told me something I hear
Last year, a mid-size orthopedic practice in the Southeast received a medical records subpoena from an attorney involved in a personal injury lawsuit. The office
In February 2024, OCR settled with a healthcare system for $480,000 after an investigation revealed that multiple workforce members had accessed patient records without
A mid-size hospital system in the Midwest allowed its entire billing department unrestricted access to complete patient medical records — including clinical notes, mental health histories,
In 2023, OCR reported that hacking and IT incidents accounted for 79% of all large healthcare data breaches — a staggering figure that would have been
In 2022, OCR settled with a dental practice in New England for $50,000 — not because of a data breach, but because the practice failed
In 2022, OCR settled with a dental practice in North Carolina for $50,000 — not because of a data breach, but because the practice failed
In 2022, OCR settled with a dental practice in Georgia for $62,500 — not because of a data breach, but because the practice failed to
In 2023, OCR settled with a Florida-based dental practice for $30,000 after an investigation revealed the organization had never implemented formal workforce training — despite
When an OSHA inspector walks into your clinic requesting access to employee medical records, exposure logs, and workplace injury documentation, your compliance team faces a
In 2023, a dental practice in the Southeast received citations from both OSHA and OCR within the same six-month window. The OSHA inspection uncovered improperly
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.