Notice of Privacy Practices
The Blank Describes How PHI May Be Used Under HIPAA
If you've encountered the question "the blank describes how PHI may be used" in a HIPAA training module or certification exam,
Tag
OCR Enforcement
Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
HIPAA Enforcement Rule
Enforcement Rule: Applies to Covered Entities Only? True or False
If you've encountered the question "the enforcement rule applies to covered entities only — true or false" on a compliance quiz, you
OCR Enforcement
The HHS Office for Civil Rights Is Charged with Protecting PHI
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of 12,
HITECH Act
The HITECH Act Introduced Penalties for HIPAA Violations Based On Tiered Culpability
In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3 million appeal after OCR determined that three data breaches involving unencrypted
HIPAA Compliance
The Importance of HIPAA: What Every Healthcare Org Must Know
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed massive gaps in risk
Minimum Necessary Standard
The Minimum Necessary Rule Refers To: A Practical Guide
In 2022, OCR settled with a dental practice for $25,000 after an investigation revealed the organization had disclosed an entire patient medical record to
Minimum Necessary Standard
The Minimum Necessary Standard Means To Limit PHI Access
In 2023, OCR settled with a covered entity for over $100,000 after an investigation revealed that employees were routinely accessing patient records unrelated to
HIPAA Privacy Rule
The Privacy Rule HIPAA: What Your Organization Must Do
In February 2024, OCR settled with a New England dermatology practice for $300,640 after investigators found the organization had no policies implementing basic Privacy
HIPAA Rules
The Three Parts of HIPAA Are: What Every Organization Must Know
In 2023, OCR settled with a dental practice for $350,000 after investigators discovered the organization had no written security policies, no risk analysis, and
HIPAA Rules
Three HIPAA Rules Every Covered Entity Must Follow
In February 2023, OCR settled with a healthcare provider for $1.25 million after investigators found failures spanning all three HIPAA rules — inadequate safeguards for
HIPAA Rules
Three Primary Rules of HIPAA: What Your Organization Must Know
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed failures across multiple HIPAA
HIPAA Training
Training Requirements Include Volunteers Under the Direction of an Entity
In 2023, OCR investigated a mid-size hospital that suffered a breach traceable to a volunteer who accessed patient records without authorization. The hospital argued the