A collection of 250 posts
The $4.3 Million Mistake That Started With One Wrong Assumption In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices
A Single Missing Step Cost This Health System $4.3 Million In 2023, OCR announced a $4.3 million settlement with Lafourche Medical Group after
The Bloodborne Pathogen Report That Triggered a HIPAA Investigation A mid-sized hospital in the Midwest filed an OSHA incident report after a needle stick injury.
Most people in healthcare think HIPAA is a privacy law. It is — but that's only one piece. The full statute contains five distinct
A $4.75 Million Fine Started with a Single Stolen Laptop In 2014, New York-Presbyterian Hospital and Columbia University Medical Center paid a combined $4.
A hospital receptionist in Texas forwarded a patient's lab results to the wrong email address. It took fourteen seconds. The breach affected one
A pediatric nonprofit in Idaho lost $387,200 because one employee — one — opened a phishing email and exposed the ePHI of 10,000 patients. When
A Law Signed in 1996 That Didn't Really Bite Until Years Later Here's a question I get surprisingly often from compliance
A receptionist at a small cardiology practice in Arizona looked up her ex-husband's medical records one afternoon. She didn't share them.
A Therapist's Worst Nightmare Starts with a Fax Machine A licensed counselor in a mid-sized practice hit "send" on a fax
It's HIPAA, Not HIPPA — and It's Older Than You Think I get this question more than almost any other: when was
A pediatric clinic in Colorado lost $548,265 because their front desk staff didn't know that faxing PHI to the wrong number triggered
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.