HIPAA Compliance
What Information Is Not Protected by HIPAA
A hospital's HR department shared an employee's sick leave records with a manager, and the employee filed a complaint with the
Tag
OCR Enforcement
Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
HIPAA BAA
What Is a HIPAA BAA and Why Your Organization Needs One
In 2023, OCR settled with a health system for $1.25 million after discovering that the organization had allowed a vendor to access protected health
HIPAA Rules
What Is a HIPAA Rule? A Practical Compliance Guide
In 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed critical failures across multiple HIPAA
HIPAA Violation
What Is a Violation of HIPAA? Real Examples and Risks
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affected nearly 3 million patients — the result of insufficient access
HIPAA
What Is HIPAA and HITECH: A Compliance Guide
In February 2011, a major health system paid $4.3 million to settle with the Office for Civil Rights after stolen laptops exposed the electronic
HIPAA Basics
What Is HIPAA and What Is Its Purpose in Healthcare
In 2023, the Office for Civil Rights (OCR) settled or imposed penalties in cases totaling over $4 million — all stemming from organizations that failed to
HIPAA HITECH
What Is HIPAA HITECH and Why It Changed Compliance
In February 2011, Massachusetts General Hospital paid $1 million to settle HIPAA violations involving the loss of protected health information for 192 patients. What made
HITECH Act
What Is HIPAA HITECH Act and Why It Changed Enforcement
In February 2011, Cignet Health of Prince George's County, Maryland received a $4.3 million civil money penalty from the Office for Civil
HITECH Act
What Is HITECH and HIPAA? How These Laws Work Together
When Advocate Medical Group paid $5.55 million to settle HIPAA violations in 2016, the penalty wasn't calculated under the original 1996 HIPAA
Notice of Privacy Practices
What Is Notice of Privacy Practices Under HIPAA?
In 2022, a small dental practice in the Southeast received a corrective action letter from the Office for Civil Rights (OCR) after a patient complaint
Omnibus Rule
What Is the Omnibus Rule? A Practical HIPAA Guide
In January 2013, the Department of Health and Human Services published a rule that fundamentally restructured HIPAA enforcement — and many healthcare organizations are still catching
PHI
What Is PHI and What Is Not: A Practical Guide
In 2023, a dental practice in New England received a $50,000 OCR settlement after a workforce member posted a patient's before-and-after photos