Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
A nurse texts a patient's lab results to a colleague using a personal phone. A receptionist confirms an appointment over the phone to
A home health aide I worked with once told me, "We're too small to be a covered entity." Her agency had
A hospital employee in Texas once looked up her ex-husband's medical records out of curiosity. She didn't change anything. She didn&
A hospital system in New York handed HHS investigators a three-ring binder full of policies during an audit. The binder looked impressive — hundreds of pages,
A Single Stolen Laptop Cost This Health System $3.9 Million In 2018, the University of Rochester Medical Center (URMC) settled with the Office for
A Receptionist, a Sticky Note, and a $1.5 Million Fine A front-desk employee at a specialty clinic jotted down a patient's name,
In 2018, a small dermatology practice in Massachusetts agreed to pay $150,000 to the Office for Civil Rights after a physician threw patient records
In 2017, Presence Health paid $475,000 to the Office for Civil Rights after a single mistake: they waited too long to notify patients about
That Stack of Forms Your Front Desk Hands Out? It Might Be Wrong. I once walked into a three-provider medical practice in Georgia and asked
A small pediatric clinic in Colorado thought they had HIPAA handled. They'd trained their staff once — back in 2014. When OCR came knocking
A Receptionist, a Phone Call, and a $1.5 Million Problem A hospital receptionist confirmed a patient's diagnosis to someone who claimed to
In February 2011, a health plan called Cignet Health of Prince George's County, Maryland received a $4.3 million civil monetary penalty from
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.