HIPAA PHI: What Counts as Protected Health Information
A Receptionist, a Fax Machine, and a $1.5 Million Mistake In 2018, a staff member at a large health plan faxed a patient'
Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
A Receptionist, a Fax Machine, and a $1.5 Million Mistake In 2018, a staff member at a large health plan faxed a patient'
A therapist mentions a patient's name and diagnosis in a hallway conversation with a colleague. A front-desk staffer leaves a printed appointment list
A nurse in New York pulled up her ex-boyfriend's medical records on a slow Tuesday night. A front desk coordinator in Texas posted
Last year, a behavioral health clinic in Texas failed an OCR audit — not because they didn't have policies, but because their staff couldn&
A hospital employee in Texas forwards a patient's lab results to her personal Gmail account so she can "finish up charting at
72,000 Patients Found Out About Their Breach From the Evening News That's not a hypothetical. In 2023, Yakima Valley Memorial Hospital discovered
A home health agency owner in Texas once told me, with total confidence, that HIPAA didn't apply to her because she wasn'
A radiology practice in Tennessee lost a single unencrypted laptop in 2014. That one device — left in a car overnight — exposed the protected health information
A Single Spreadsheet Took Down a $3 Million Settlement In 2018, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop and two
Here's something that won't surprise you: "hippaa law" is one of the most common misspellings in healthcare compliance. Thousands
A Single Fax Changed Everything for This Hospital In 2018, a hospital employee in Tennessee faxed a patient's psychiatric records to the wrong
A mid-size orthopedic practice in Connecticut migrated its entire patient scheduling system to the cloud in 2023. Six months later, a workforce member accidentally made
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.