A collection of 45 posts
When Cignet Health of Maryland refused to provide 41 patients access to their medical records, the Office for Civil Rights (OCR) imposed a $4.3
In 2022, OCR settled with a dental practice in New England for $50,000 — not because of a data breach, but because the practice failed
In 2022, OCR settled with a dental practice in North Carolina for $50,000 — not because of a data breach, but because the practice failed
In 2022, OCR settled with a dental practice in Georgia for $62,500 — not because of a data breach, but because the practice failed to
In 2023, OCR settled with a health system that had been using an outdated authorization form for nearly four years — one that failed to include
In 2023, OCR settled with a health system for $40,000 after it failed to provide a patient timely access to her own medical records
In 2023, a mid-sized hospital system in the Midwest paid $125,000 to settle an OCR investigation after it disclosed patient records based on an
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization failed to provide a patient timely access to their
In 2023, a dental practice in New England paid a $50,000 settlement to OCR after a patient filed a complaint alleging the practice refused
In 2023, OCR settled with a dental practice in New England for $50,000 after it failed to provide a patient with a copy of
In 2023, OCR settled with a health system for $40,000 after the organization failed to provide a patient timely access to her own medical
In 2024, Kaiser Permanente disclosed that a tracking technology breach potentially exposed the protected health information of 13.4 million individuals — one of the largest
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.