A collection of 119 posts
Every January, OCR publishes a reminder that workforce training failures remain among the top reasons healthcare organizations face enforcement actions. In 2023 alone, multiple settlements
In 2023, a dental practice in New England paid over $50,000 to settle an OCR investigation triggered by a single unencrypted email containing patient
Why Healthcare Organizations Are Combining OSHA and HIPAA Into One Training Strategy In 2023, OCR settled with a covered entity for $1.3 million after
A mid-sized dental practice in the Southeast received citations from both OSHA and OCR within the same calendar year — one for failing to maintain a
In 2023, a mid-sized dental practice in Ohio received citations from both OSHA and OCR within the same quarter — one for failing to maintain an
In 2023, a mid-sized dental practice in Texas was hit with two separate enforcement actions within the same quarter — one from OSHA for failing to
In 2023, a mid-sized dental practice in Ohio received citations from both OSHA and OCR within the same six-month period. The OSHA citation targeted inadequate
In February 2024, OCR settled with a Louisiana medical group for $480,000 after determining that the organization had failed to provide patients timely access
In 2016, OCR settled with a business associate for $650,000 after a subcontractor experienced a breach affecting over 11,000 patients — and no business
In 2023, CMS published over 12.9 billion dollars in physician payment data through the Open Payments database — the public-facing arm of the Sunshine Act.
In June 2023, OCR settled with a dental practice management company for $350,000 after discovering the organization had failed to execute proper agreements with
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.