Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
A $4.3 Million Settlement Started with One Untrained Employee In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop and
The Compliance Officer Who Thought a YouTube Video Was Enough I once consulted for a mid-size home health agency in Florida that had been using
A pediatric clinic in Texas lost a single unencrypted laptop in 2017. That laptop contained the electronic protected health information (ePHI) of 3,500 patients
A Single Fax Machine Cost One Health System $4.3 Million In 2023, Banner Health agreed to a $1.25 million settlement with the Office
A hospital in Oklahoma discovers that an employee has been snooping through patient records for three months. Leadership finds out on a Tuesday. They spend
A Filing Cabinet Almost Cost This Clinic $150,000 A few years ago, I consulted with a small orthopedic clinic in the Midwest that had
In 2018, a Texas cancer center paid $4.3 million to HHS after two unencrypted devices containing ePHI went missing. The root cause wasn'
A therapist in private practice once told me she didn't think HIPAA applied to her because she wasn't a hospital. A
A nurse at a small dermatology practice in Connecticut posted a selfie on Instagram. In the background, a patient's intake form sat on
A $4.3 Million Penalty Started With One Missing Safeguard In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices containing
A Lab Director's $100,000 Mistake Over a Spreadsheet Column A lab director at a mid-size hospital once told me she'd
A woman in California walked into her new dermatologist's office and discovered something unsettling. Her previous provider — a physician she'd left
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.