HIPAA Authorization
Authorization of Release of Health Information Rules
A hospital in Texas released three years of a patient's psychotherapy notes to an employer — based on a form the patient had signed
Tag
OCR Enforcement
Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
HIPAA Basics
HIPAA Basics for Providers: What You Must Know in 2026
A small cardiology practice in Oklahoma didn't think twice about faxing patient records to the wrong number. It happened once. Then twice. Then
HIPAA Regulations
HIPAA Regulations Are Designed to Protect More Than You Think
A $4.3 Million Wake-Up Call in a Hospital Basement In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted USB drive
HITECH Act
What Is the HIPAA HITECH Act? A Practical Guide
In February 2011, Cignet Health of Prince George's County, Maryland received a $4.3 million penalty from the Office for Civil Rights — the
Business Associate
Which of These Entities Could Be a Business Associate?
A managed IT company in Tennessee gets hit with a $2.3 million settlement from HHS because a hospital never signed a business associate agreement
Electronic Health Records
Electronic Health Records HIPAA Compliance in 2026
A single misconfigured EHR user account cost Anthem, Inc. $16 million in 2018 — still the largest HIPAA settlement in history. The breach exposed nearly 79
Covered Entity
What Is a Covered Entity Under HIPAA? A Clear Guide
A few years ago, I got a call from the owner of a small billing company in Ohio. She was convinced HIPAA didn't
HIPAA Penalties
How Civil and Monetary Penalties for Violations Are Assessed
In February 2023, Banner Health agreed to pay $1.25 million to the Office for Civil Rights after a breach exposed the electronic protected health
HIPAA Privacy Form
HIPAA Privacy Form: What It Must Include in 2026
A woman walked into a dermatology clinic in Phoenix, checked in at the front desk, and was handed a clipboard with a single sheet of
HIPAA Training
Best Course for HIPAA: What Actually Works in 2026
A $4.3 Million Fine Started with a Training Gap In 2023, the University of Texas MD Anderson Cancer Center lost its final appeal on
HIPAA Identifiers
HIPAA Identifier Explained: The 18 Data Points That Matter
A Spreadsheet, a Social Security Number, and a $1.5 Million Settlement In 2018, Anthem Inc. paid $16 million to the Office for Civil Rights
Business Associate
Business Associate as Defined by HIPAA: What You Must Know
The $4.3 Million Mistake That Started With a Vendor Contract In 2016, Advocate Medical Group paid $5.55 million to settle HIPAA violations — and