Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
In February 2024, OCR settled with a healthcare provider for $480,000 after an investigation revealed systemic failures to comply with the HIPAA Privacy Rule
In February 2024, OCR announced a $4.75 million settlement with a major healthcare system that failed to provide patients timely access to their medical
In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed the organization had failed to properly safeguard patient
In 2023, OCR settled with a dental practice for $350,000 after an employee disclosed a patient's protected health information on social media.
In February 2024, a small dental practice in New England agreed to a $50,000 settlement with the Office for Civil Rights after a former
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a hospital employee sold protected health information (PHI) of over
In 2023, a patient in Texas discovered her therapist had disclosed session notes to a family member without authorization. She hired an attorney, filed suit
In February 2024, OCR announced a $4.75 million settlement with a healthcare system that failed to implement even basic safeguards for protected health information.
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had no clear understanding of what data it
In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed that records containing protected health information were stored
In 2023, a mid-sized clinic in the Southeast received a records request from OCR during a compliance review — and couldn't produce its risk
When Maryland enacted its strict genetic information privacy law and California expanded patient access rights beyond what federal rules require, many healthcare organizations asked the
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.