HIPAA Course: What Your Team Actually Needs in 2026
A $4.3 Million Wake-Up Call That Started With Bad Training In 2023, the University of Washington Medicine paid $750,000 to settle with OCR
Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
A $4.3 Million Wake-Up Call That Started With Bad Training In 2023, the University of Washington Medicine paid $750,000 to settle with OCR
After consulting for over 2,500 healthcare organizations, they all had one major risk in common—no audit record or evidence of HIPAA training. Learn how to stay off OCR's radar.
In 2023, OCR settled with a dental practice in New England that had never conducted a risk analysis, never issued a Notice of Privacy Practices,
In 2024, OCR settled with a healthcare provider for $40,000 after an investigation revealed that multiple workforce members had never received HIPAA training — despite
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting over 2.81 million individuals exposed systemic failures in
In 2023, a mid-size hospital system in the Southeast received a corrective action mandate from OCR after routinely using an outdated, overly broad release form
In 2023, OCR settled with a dental practice in New England for $50,000 after a patient filed a complaint that the practice had disclosed
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over
In February 2024, OCR announced a $4.75 million settlement with a nonprofit health system that failed to conduct an enterprise-wide risk analysis — a failure
In 2023, a dental practice in New England received a six-figure penalty from OCR after posting appointment reminders on a public-facing scheduling platform that exposed
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over
In February 2024, OCR announced a $4.75 million settlement with a hospital system that failed to conduct an enterprise-wide risk analysis — a requirement that
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.