A collection of 54 posts
In December 2023, OCR settled with a healthcare system for $480,000 after an investigation revealed workforce members had been emailing unencrypted patient information to
A nurse finishes a difficult shift and, over dinner with friends, recounts a dramatic case from the ER — the injuries, the treatment, the patient'
In 2022, OCR settled with a dental practice in New England for $50,000 — not because of a data breach, but because the practice failed
In 2022, OCR settled with a dental practice in Georgia for $62,500 — not because of a data breach, but because the practice failed to
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had disclosed patient health information PHI to a
In February 2024, OCR announced a $4.75 million settlement with a nonprofit health system that failed to conduct an enterprise-wide risk analysis — leaving the
In 2023, OCR settled with a dental practice in New England for $50,000 after it disclosed patient records to a third-party marketing firm without
In 2022, a dental practice in New England received a corrective action from OCR after an employee discussed a patient's treatment plan loudly
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had disclosed patient records to a third-party marketing
In February 2023, OCR settled with a dental practice for $195,000 after investigators found the organization had no written policies implementing the HIPAA Privacy
If you've encountered the question "the blank describes how PHI may be used" in a HIPAA training module or certification exam,
In 2022, OCR settled with a dental practice for $25,000 after an investigation revealed the organization had disclosed an entire patient medical record to
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.