When Did HIPAA Become a Law? The Full Timeline
On August 21, 1996, President Bill Clinton picked up a pen and signed a law that most people in healthcare wouldn't feel the
HIPAA Privacy Rule requirements and guidance
On August 21, 1996, President Bill Clinton picked up a pen and signed a law that most people in healthcare wouldn't feel the
In 2018, a small insurance company called Anthem paid $16 million to the Office for Civil Rights — the largest HIPAA settlement in history at that
A hospital employee in Texas looks up her ex-husband's medical records after a bitter custody dispute. A small clinic in Georgia stores patient
In 2018, a Texas cancer center paid $4.3 million to HHS after two unencrypted devices containing ePHI went missing. The root cause wasn'
The Part of HIPAA Nobody Reads — Until It Costs Them In 1996, Congress passed HIPAA with a goal most people have forgotten. It wasn'
Last year, a small orthopedic clinic in Virginia got a letter from HHS. Not the good kind. An investigation revealed they'd been using
A small dermatology practice in Connecticut thought they had HIPAA covered. They had a privacy notice on their website and a shredder in the back
A $4.75 Million Mistake That Started With One Misunderstood Rule In 2022, Memorial Hermann Health System paid a $2.4 million settlement to HHS
A $4.75 Million Fine That Started With One Missing Document In 2023, OCR settled with Lafourche Medical Group for $480,000 after a phishing
A hospital system in the Midwest recently terminated three employees after a post-training assessment revealed they could not correctly identify what constitutes protected health information
In 2023, a mid-size hospital system in the Southeast received a corrective action mandate from OCR after routinely using an outdated, overly broad release form
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.