HIPAA Rules
What Are the Rules of HIPAA? A Practical Guide
In February 2023, OCR settled with a dental practice in New England for $30,000 after investigators found the organization had no written HIPAA policies,
Tag
OCR Enforcement
Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
Patient Rights
What Are the Six Patient Rights Under the Privacy Rule
In 2023, OCR settled with a dental practice in New England for $50,000 after it failed to provide a patient with a copy of
HIPAA Components
What Are the Two Key Components of HIPAA?
In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had no written policies addressing either patient privacy or
HIPAA Omnibus Rule
What Did the HIPAA Omnibus Rule Do? Key Changes
In January 2013, the Department of Health and Human Services published a final rule that fundamentally reshaped HIPAA enforcement — and many healthcare organizations are still
HIPAA Laws
What Do HIPAA Laws Protect? A Compliance Guide
In February 2024, OCR settled with a Louisiana medical group for $480,000 after a phishing attack exposed the protected health information of over 34,
HIPAA Basics
What Does HIPAA Mean? A Compliance Expert Explains
In 2024, OCR settled a HIPAA enforcement case with Montefiore Medical Center for $4.75 million after a workforce member stole protected health information on
Minimum Necessary Standard
What Does It Mean to Follow the Minimum Necessary Standard
In 2022, a specialty clinic in the Midwest disclosed an entire patient record — surgical history, psychiatric notes, billing details — to an employer conducting a routine
HIPAA Basics
What Does the Abbreviation HIPAA Mean? Purpose Explained
In 2023, OCR settled with a health system for $1.3 million after investigators found systemic failures in safeguarding patient records — failures that traced back
HIPAA Security Rule
What Does the HIPAA Security Rule Establish Safeguards to Protect?
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole electronic protected health information (ePHI) of
Privacy Rule
What Does the Privacy Rule Grant to Patients?
In 2023, OCR settled with a health system for $40,000 after the organization failed to provide a patient timely access to her own medical
HIPAA Violations
What Happens If You Violate HIPAA: Penalties Explained
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting over 2.81 million individuals exposed systemic failures in
HIPAA Compliance
What Information Is Not Protected by HIPAA
A hospital's HR department shared an employee's sick leave records with a manager, and the employee filed a complaint with the