HIPAA Violations
HIPAA Violations and Social Media: A Growing Risk
In 2022, a hospital nurse in New York was terminated and reported to OCR after posting a photo of a busy emergency room on Instagram
Tag
PHI
A collection of 96 posts
HIPAA Privacy Rule
HIPAA's Privacy Rule: What Your Organization Gets Wrong
In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had been disclosing patient records to a third-party marketing
HITECH Act
HITECH Act Medical Records: What Your Organization Must Know
When Cignet Health of Maryland refused to provide 41 patients access to their medical records, the Office for Civil Rights (OCR) imposed a $4.3
HIPAA Patient Identifiers
How Many Patient Identifiers Are Required by HIPAA
A behavioral health clinic in Connecticut received a $125,000 penalty from OCR after disclosing a spreadsheet of patient data that staff believed was "
HIPAA Forms
How to Fill Out a HIPAA Form: A Practical Guide
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization was routinely using deficient authorization forms that failed
Patient Identifiers
Information That Contains One or More Patient Identifiers
Why a Single Patient Identifier Triggers Full HIPAA Protection In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation
HIPAA Email
Is Email PHI? What HIPAA Actually Requires for Email
In December 2023, OCR settled with a healthcare system for $480,000 after an investigation revealed workforce members had been emailing unencrypted patient information to
HIPAA Violation
Is Telling a Story About a Patient a HIPAA Violation?
A nurse finishes a difficult shift and, over dinner with friends, recounts a dramatic case from the ER — the injuries, the treatment, the patient'
Notice of Privacy Practices
Notice of Privacy Practices: What Most Organizations Get Wrong
In 2022, OCR settled with a dental practice in New England for $50,000 — not because of a data breach, but because the practice failed
Notice of Privacy Practices
Notice of Privacy Practices Meaning Explained for 2024
In 2022, OCR settled with a dental practice in Georgia for $62,500 — not because of a data breach, but because the practice failed to
Patient Health Information
Patient Health Information PHI: What Counts and What Doesn't
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had disclosed patient health information PHI to a
PHI
PHI HIPAA Compliance: Protecting Health Data in 2024
In February 2024, OCR announced a $4.75 million settlement with a nonprofit health system that failed to conduct an enterprise-wide risk analysis — leaving the