Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
A $4.3 Million Fine Started with a Missing Definition In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices containing
The Hurricane That Exposed a Hospital's HIPAA Blind Spot In the aftermath of Hurricane Katrina, hospitals across the Gulf Coast scrambled to reunite
A receptionist at a cancer clinic in Florida forwarded a spreadsheet of 1,200 patient names, diagnoses, and Social Security numbers to her personal Gmail
A small dermatology practice in Connecticut thought they had HIPAA covered. They had a privacy notice on their website and a shredder in the back
The Penalty That Started With an Untrained Receptionist In 2018, Cottage Health paid $3 million to settle with HHS after a breach exposed over 62,
A radiology technician at a hospital in New York forwarded a patient's imaging report to her personal Gmail account so she could "
A physician in Texas billed Medicare for over 5,000 hours of home health services in a single year. That's roughly 14 hours
A front desk coordinator at a three-dentist practice in North Carolina handed a patient the wrong checkout summary. Attached to it was another patient'
A Single Unencrypted Laptop Changed Everything In 2017, a stolen laptop cost Lifespan Health System Affiliated Covered Entity (ACE) a $1,040,000 settlement with
Last year, I watched a three-physician practice in the Midwest spend eleven months fighting an OCR investigation — without a lawyer for the first four. By
Every week, thousands of people type "hippa class" into Google. I know because I've watched the search data for years. Here&
A Single Spreadsheet Cost This Health Plan $6.85 Million In 2023, Premera Blue Cross agreed to a $6.85 million settlement with HHS after
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.