Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
A hospital in Texas faxed 277 patient records to the wrong physician's office. No authorization on file. No tracking log. No documentation that
It's HIPAA, Not HIPPA — and It's Older Than You Think I get this question more than almost any other: when was
A pediatric clinic in Colorado lost $548,265 because their front desk staff didn't know that faxing PHI to the wrong number triggered
A $4.75 Million Wake-Up Call That Should Have Changed Everything In February 2017, Memorial Healthcare System paid $5.5 million to the U.S.
A hospital employee in Texas pulls up a patient's full medical record to verify an insurance code. She only needs the diagnosis and
The Typo That Reveals a Bigger Problem Every month, thousands of people search for a "hippa course." I know because I watch the
Last month, a practice manager in Phoenix emailed me a certificate she'd earned from an online course. It had a gold seal, an
A $4.75 Million Wake-Up Call That Started With a Checkbox In 2023, Banner Health paid $1.25 million to settle with OCR after investigators
A surgeon's office in Texas faxed a patient's entire psychiatric history to a life insurance company. The patient hadn't
A single misconfigured EHR server exposed the protected health information of 3.9 million patients at Advocate Medical Group — and cost the organization $5.55
That Clipboard Form Nobody Reads Could Cost You Six Figures Here's a scene I've witnessed dozens of times: a patient walks
That "No-Cost" HIPAA Course Could Cost You $1.5 Million A pediatric nonprofit in Idaho thought they'd checked the box. They
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.