Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
In December 2023, OCR settled with a healthcare system for $480,000 after an investigation revealed workforce members had been emailing unencrypted patient information to
In 2023, OCR settled a case with a dental management company — not a dentist, not a hospital, but an administrative services firm — for $350,000
A nurse finishes a difficult shift and, over dinner with friends, recounts a dramatic case from the ER — the injuries, the treatment, the patient'
In 2023, OCR settled with a covered entity for $1.3 million after workforce members disclosed protected health information to unauthorized individuals — people who seemed
In December 2023, OCR issued its largest-ever HIPAA settlement — a $4.75 million penalty against Montefiore Medical Center after a workforce member stole protected health
In 2023, a Florida hospital system paid $1.3 million after a former employee accessed the protected health information of over 1,500 patients without
In 2023, the Department of Justice recovered over $2.68 billion in settlements and judgments related to healthcare fraud. Behind that staggering number is a
When OCR settled with a major health system in 2017 for $2.5 million after a breach involving an unencrypted laptop containing protected health information
In 2023, OCR settled with a dental practice in New England for $50,000 after an investigation revealed that no member of the workforce — including
When a dental practice in the Southeast received citations from both OSHA and OCR within the same quarter, the owner told me something I hear
Last year, a mid-size orthopedic practice in the Southeast received a medical records subpoena from an attorney involved in a personal injury lawsuit. The office
In February 2024, OCR settled with a healthcare system for $480,000 after an investigation revealed that multiple workforce members had accessed patient records without
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.