When Can You Use or Disclose PHI: A Compliance Guide
In 2023, OCR settled with a dental practice for $350,000 after the organization disclosed a patient's protected health information to a third-party
A collection of 23 posts
In 2023, OCR settled with a dental practice for $350,000 after the organization disclosed a patient's protected health information to a third-party
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization disclosed protected health information to a patient's
In 2023, OCR settled with a covered entity for over $100,000 after the organization disclosed protected health information without a valid authorization — partly because
In 2023, a mid-sized hospital system paid $1.3 million to settle with OCR after a series of incidents that all traced back to the
In 2023, OCR settled with a covered entity for $40,000 after an investigation revealed the organization had disclosed protected health information without a valid
In 2023, OCR investigated a mid-sized hospital system that disclosed five years of patient records to a life insurance company based on an authorization form
In February 2024, OCR settled with a New York medical practice for $100,000 after the organization failed to provide a timely written response to
In 2022, OCR settled with a New England dermatology practice for $300,640 after a breach exposed patient records — including sensitive mental health information — that
A police officer walks into your emergency department, badge in hand, requesting medical records for a patient involved in a shooting. Your front desk staff
Every week, someone contacts me asking for a "hippa waiver form" — and every week, I have to deliver the same corrective message. There
In 2023, a specialty medical practice in the Southeast received an OCR corrective action after routinely disclosing patient records to a life insurance company without
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.