Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
A nurse I worked with in 2019 had been in healthcare for 22 years. She documented patient vitals, coordinated referrals, handled insurance pre-authorizations. One day
The Clinic That Had 47 Policies and Zero Compliance Last year I walked into a mid-sized orthopedic practice that proudly handed me a three-ring binder.
A small dental practice in Indiana received a $12,000 penalty from the Office for Civil Rights in 2019. The owner told investigators he didn&
A Missing Signature Cost One Hospital $865,000 In 2019, a patient at a mid-size medical center in the Southeast requested her records be sent
A hospital in Texas once sent a spreadsheet of 3,400 patient records to a business associate — with every column of identifying data still intact.
A billing company in Tennessee lost $2.3 million because its leadership believed HIPAA was a hospital problem, not theirs. CHSPSC LLC, a management company
A $4.3 Million Penalty Started With One Untrained Employee In 2019, the University of Texas MD Anderson Cancer Center lost its appeal of a
A patient in the waiting room overhears a nurse call out another patient's name. A fax containing lab results lands on a shared
Your Chatbot Just Became a Liability A nurse pastes a patient's medication list into an AI chatbot to draft a care summary. It
A Receptionist, a Curiosity, and a $2.4 Million Problem In 2018, the University of Texas MD Anderson Cancer Center lost its appeal of a
A mid-size pediatric health network migrated to a popular cloud platform in 2022. They configured the servers, encrypted the data at rest, and assumed they
A front-desk receptionist at a Florida orthopedic clinic looked up her ex-husband's new girlfriend in the EHR. She didn't download anything.
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.