Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
A medical billing company in Tennessee exposed the records of 300,000 patients — and the hospital that hired them paid the price. Not because the
A Single Phone Number Cost This Health Plan $6.85 Million In 2018, Premera Blue Cross agreed to pay $6.85 million to the Office
The Vendor That Cost a Health Plan $4.3 Million In 2016, Advocate Health Care Network agreed to pay $5.55 million to settle multiple
Last year, a 14-person physical therapy clinic in the Midwest got hit with a corrective action plan after a random OCR audit. The finding? Their
A receptionist at a New York City dental clinic mentioned a patient's upcoming root canal to the patient's coworker — casually, in
A Faxed Lab Report Sent to the Wrong Number Started It All A nurse at a mid-size clinic in Minnesota faxed a patient's
The Audit That Costs Less Than the Breach A hospital system in Oregon thought its annual checklist was enough. Internal IT signed off every year.
The Hurricane That Exposed More Than a Hospital's Roof In 2017, Hurricane Harvey flooded a major Texas hospital system. Staff scrambled to evacuate
In 2011, a small cardiology practice in Phoenix switched from paper charts to an electronic health record system. Within six months, an unencrypted laptop containing
A $4.3 Million Wake-Up Call Buried in an EHR Audit Log In 2023, the University of Texas MD Anderson Cancer Center lost its years-long
In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3 million appeal after OCR found that unencrypted laptops and thumb drives
A $5.1 Million Penalty That Started with a Simple Question In 2017, Memorial Healthcare System in Florida agreed to pay $5.1 million to
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.