Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
A single misconfigured EHR server exposed the protected health information of 3.9 million patients at Advocate Medical Group — and cost the organization $5.55
That Clipboard Form Nobody Reads Could Cost You Six Figures Here's a scene I've witnessed dozens of times: a patient walks
That "No-Cost" HIPAA Course Could Cost You $1.5 Million A pediatric nonprofit in Idaho thought they'd checked the box. They
A $4.3 Million Mistake Started with One Misunderstood Spreadsheet In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop and
A therapist in Ohio logs into a video platform, greets her patient, and starts a session about suicidal ideation. The session is encrypted in transit
A front-desk employee at a cardiology clinic in Texas faxed a patient's billing statement to the wrong number. The document included a name,
A hospital in Louisiana lost $480,000 because a single employee snooped through a patient's medical record out of curiosity. Not a hacker.
I once watched a practice manager spend three hours searching for a "federally recognized HIPAA certification test" — convinced that HHS issued some kind
In 2018, a medical billing company called Advanced Care Hospitalists paid $500,000 to settle with HHS after a business associate they'd hired
A small dermatology practice in Connecticut thought they were HIPAA compliant because they had a privacy notice in the lobby and passwords on their computers.
A front-desk employee at a Florida clinic bills Medicare for physical therapy sessions that never happened. A physician upcodes patient visits — documenting complex evaluations when
A hospital employee in Texas once forwarded a patient's lab results to her personal Gmail account so she could "finish charting at
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.