Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
When HHS announced in late 2024 that the COVID-era telehealth enforcement discretion would not be extended indefinitely, many healthcare organizations realized they had been operating
When OCR announced in May 2023 that the COVID-era telehealth HIPAA enforcement discretion was ending, thousands of healthcare organizations realized they had been operating on
When a major Texas health system paid $1.6 million in state penalties for unauthorized disclosures of protected health information, it wasn't a
In 2023, a dental practice in Texas agreed to a $50,000 settlement with OCR after an investigation revealed staff members were texting appointment reminders
In 2023, a dental practice in Texas paid a $50,000 settlement to the HHS Office for Civil Rights after an employee texted patient appointment
In 2023, a small dental practice in Texas received a $50,000 settlement with OCR after a staff member routinely texted patient appointment details, diagnoses,
In 2023, the Department of Justice recovered over $2.68 billion in settlements and judgments related to healthcare fraud — and a significant portion of those
If you've encountered the question "the blank describes how PHI may be used" in a HIPAA training module or certification exam,
If you've encountered the question "the enforcement rule applies to covered entities only — true or false" on a compliance quiz, you
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of 12,
In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3 million appeal after OCR determined that three data breaches involving unencrypted
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed massive gaps in risk
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.