Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
A hospital compliance officer once told me she spent three months building an elaborate minimum necessary policy — role-based access matrices, tiered authorization levels, the works.
A $4.75 Million Cloud Assumption In 2020, a health system executive told me their patient data was "totally secure" because they'
A solo chiropractor in New England assumed HIPAA didn't apply to her practice. She had fewer than ten employees, no electronic health records
One Misspelled Word That Tells Me Everything About Your Compliance Program I once walked into a medical office where every break room poster, every employee
A small dermatology practice in Connecticut lost $150,000 in a single afternoon. Not from a lawsuit. Not from a bad investment. From a corrective
A Spreadsheet That Cost $6.85 Million In 2018, Premera Blue Cross agreed to pay $6.85 million to the Office for Civil Rights after
A therapist's office in Connecticut faxed 47 pages of psychotherapy notes to an employer — all because someone handed them a generic HIPAA release
A therapist in a small group practice mentioned a patient's diagnosis during a casual hallway conversation with the front desk staff. No chart
A Single Fax Machine Cost This Hospital $4.8 Million In 2019, a fax sent to the wrong number exposed 498 patients' protected health
A Missing Signature Cost One Hospital $865,000 In 2019, a patient filed a complaint with the Office for Civil Rights after a hospital released
Let me save you some trouble: the forms you're searching for when you type "hippa forms" are actually called HIPAA forms
A Receptionist's Casual Comment Cost a Hospital $4.3 Million In 2019, the University of Rochester Medical Center agreed to pay $3 million
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.