Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
The Hurricane That Exposed More Than a Hospital's Roof In 2017, Hurricane Harvey flooded a major Texas hospital system. Staff scrambled to evacuate
In 2011, a small cardiology practice in Phoenix switched from paper charts to an electronic health record system. Within six months, an unencrypted laptop containing
A $4.3 Million Wake-Up Call Buried in an EHR Audit Log In 2023, the University of Texas MD Anderson Cancer Center lost its years-long
In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3 million appeal after OCR found that unencrypted laptops and thumb drives
A $5.1 Million Penalty That Started with a Simple Question In 2017, Memorial Healthcare System in Florida agreed to pay $5.1 million to
A hospital employee in Texas looks up her ex-husband's medical records out of curiosity. A dental office in Georgia tosses paper charts into
A Mother Couldn't Get Her Own Son's Medical Records — Then the Feds Got Involved In 2019, a small medical practice in
A scheduling coordinator at a mid-size orthopedic practice pulled a patient's full medical record — psychiatric notes, HIV status, substance abuse history — just to
The CEO Who Learned HIPAA the Hard Way In 2018, the owner of a small health plan called Filefax agreed to pay $100,000 to
A $4.75 Million Wake-Up Call That Started With One Unencrypted Laptop In 2014, New York-Presbyterian Hospital and Columbia University paid a combined $4.8
A receptionist at a busy cardiology practice in Texas forwarded a patient's insurance form to her personal Gmail account. She wasn't
A receptionist at a dental clinic forwarded a spreadsheet of patient names, Social Security numbers, and insurance IDs to her personal Gmail account so she
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.