A collection of 355 posts
In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3 million appeal after OCR found that the organization had policies on
A few years ago, I got a call from the office manager of a chiropractic clinic in Texas. She was panicking. They'd just
A receptionist at a small orthopedic clinic in Arizona clicked "Reply All" to an email containing 836 patient records. The breach triggered an
A home health agency in Texas got hit with two separate federal investigations in the same quarter — one from OSHA for failing to maintain a
A $4.75 Million Fine That Started With One Missing Document In 2023, OCR settled with Lafourche Medical Group for $480,000 after a phishing
Most People Only Know Two of the Five Parts of HIPAA I was running a compliance workshop for a mid-size hospital system last year when
Here's something that surprises most people in healthcare: the law they cite every single day — HIPAA — has five distinct sections, and the vast
A small cardiology practice in Tennessee thought they were compliant. They had a privacy notice taped to the front desk. Their EHR vendor told them
A personal trainer asks a client about her recent knee surgery. A school nurse hands a student's immunization record to a teacher. A
The Typo That 14,000 People Search for Every Month Let's get the elephant out of the room. You searched for HIPPA compliance
That Google Search Could Cost You More Than You Saved I watched a 14-person cardiology practice in Texas get hit with a $160,000 settlement
Last year, I watched a small behavioral health clinic in Ohio hand OCR investigators a framed HIPAA compliance certificate during an audit — as if it
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.