HIPAA Policy Template
HIPAA Policy Template: What OCR Actually Expects
In 2023, OCR settled with a dental practice in New England for $350,000 — not because of a massive data breach, but because the organization
Tag
OCR Enforcement
Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
HIPAA Privacy Rule
HIPAA Privacy and Security Rule: What Your Organization Must Know
In February 2024, OCR settled with a healthcare system for $4.75 million after investigators found the organization had failed to conduct an enterprise-wide risk
HIPAA Privacy Authorization
HIPAA Privacy Authorization: What Your Forms Must Include
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization disclosed protected health information to a reporter's
HIPAA Privacy Forms
HIPAA Privacy Forms: What Your Organization Must Get Right
In 2023, OCR settled with a dental practice in New England for $50,000 after investigators discovered the organization had failed to provide patients with
HIPAA Privacy Forms
HIPAA Privacy Forms for Patients: What You Must Include
In 2023, OCR settled with a dental practice in New England for $50,000 after investigators found the organization had failed to provide patients with
HIPAA Privacy Regulations
HIPAA Privacy Regulations: What Covered Entities Miss
In February 2024, OCR settled with a healthcare provider for $480,000 after an investigation revealed systemic failures to comply with the HIPAA Privacy Rule
HIPAA Privacy Rule
HIPAA Privacy Rule Compliance: What OCR Expects
In February 2024, OCR announced a $4.75 million settlement with a major healthcare system that failed to provide patients timely access to their medical
HIPAA Privacy Rule
HIPAA Privacy Rules Include PHI Such As These 18 Identifiers
In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed the organization had failed to properly safeguard patient
HIPAA Privacy Test
HIPAA Privacy Test: What Your Workforce Must Know
In 2023, OCR settled with a dental practice for $350,000 after an employee disclosed a patient's protected health information on social media.
HIPAA Privacy Violation
HIPAA Privacy Violation: What Triggers OCR Enforcement
In February 2024, a small dental practice in New England agreed to a $50,000 settlement with the Office for Civil Rights after a former
HIPAA Privacy Violations
HIPAA Privacy Violations: How They Happen and How to Prevent Them
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a hospital employee sold protected health information (PHI) of over
HIPAA Private Cause of Action
HIPAA Private Cause of Action: Why Patients Can't Sue
In 2023, a patient in Texas discovered her therapist had disclosed session notes to a family member without authorization. She hired an attorney, filed suit