Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
In October 2023, OCR settled with a healthcare system in Louisiana for $480,000 after a phishing attack compromised the protected health information of over
In 2022, a hospital nurse in New York was terminated and reported to OCR after posting a photo of a busy emergency room on Instagram
In February 2024, OCR settled with a healthcare provider for $4.75 million after an investigation revealed systemic failures across nearly every major HIPAA requirement
In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had been disclosing patient records to a third-party marketing
In March 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed that the organization had been disposing of
Every week, healthcare administrators search for "hipp certification" expecting to find a single credential that makes their organization HIPAA-compliant. The reality is more
In 2024, OCR settled with a New England dermatology practice for $300,000 after discovering that protected health information had been disclosed to a vendor
In late 2023, a large health system deployed a generative AI chatbot to assist clinical staff with documentation. Within weeks, workforce members were pasting entire
Every week, thousands of healthcare workers search for a HIPPA class — and right away, there's a problem. The correct acronym is HIPAA: the
In 2023, OCR settled with a Florida-based health system for $1.3 million after an investigation revealed that workforce members had been accessing patient records
In 2022, OCR settled with a health plan for $875,000 after an investigation revealed that protected health information stored in a cloud environment lacked
In 2023, a small dental practice in Texas received an OCR investigation notice after a patient complained that the office shared medical records with a
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.