HIPAA Privacy Rule
The HIPAA Privacy Rule Provides Patients the Right to Request
A Mother Waited 18 Months for Her Son's Medical Records. Then OCR Got Involved. In 2019, Cignet Health of Prince George's
Tag
Patient Rights
A collection of 41 posts
HIPAA Notice of Privacy Practices
HIPAA Notice of Privacy Practices: What You Must Get Right
That Binder Gathering Dust at Your Front Desk Could Cost You Six Figures I walked into a dermatology practice last spring and asked to see
HIPAA General Release Form
HIPAA General Release Form: What Your Organization Must Know
In 2023, a mid-size hospital system in the Southeast received a corrective action mandate from OCR after routinely using an outdated, overly broad release form
Notice of Privacy Practices
HIPAA Notice of Privacy Practices Requirements Explained
In 2022, OCR settled with a dental practice in New England for $30,000 after an investigation revealed — among other violations — that the practice had
HIPAA Privacy Forms
HIPAA Privacy Forms for Patients: What You Must Include
In 2023, OCR settled with a dental practice in New England for $50,000 after investigators found the organization had failed to provide patients with
HIPAA Private Cause of Action
HIPAA Private Cause of Action: Why Patients Can't Sue
In 2023, a patient in Texas discovered her therapist had disclosed session notes to a family member without authorization. She hired an attorney, filed suit
HIPAA Authorization
HIPAA Release Authorization Form: What Your Organization Must Include
In 2023, OCR investigated a mid-sized specialty clinic that had been using the same patient authorization form since 2009. The form lacked three of the
Accounting of Disclosures
HIPAA Requires an Accounting of Disclosures: Your Guide
In 2011, a small physician practice in the Midwest received a patient's written request for an accounting of disclosures. The office manager had
HITECH Act
HITECH Act Medical Records: What Your Organization Must Know
When Cignet Health of Maryland refused to provide 41 patients access to their medical records, the Office for Civil Rights (OCR) imposed a $4.3
Notice of Privacy Practices
Notice of Privacy Practices: What Most Organizations Get Wrong
In 2022, OCR settled with a dental practice in New England for $50,000 — not because of a data breach, but because the practice failed
Notice of Privacy Practices
Notice of Privacy Practices Definition: What HIPAA Requires
In 2022, OCR settled with a dental practice in North Carolina for $50,000 — not because of a data breach, but because the practice failed
Notice of Privacy Practices
Notice of Privacy Practices Meaning Explained for 2024
In 2022, OCR settled with a dental practice in Georgia for $62,500 — not because of a data breach, but because the practice failed to