HIPAA Privacy Rule requirements and guidance
The Part of HIPAA Nobody Reads — Until It Costs Them In 1996, Congress passed HIPAA with a goal most people have forgotten. It wasn'
Last year, a small orthopedic clinic in Virginia got a letter from HHS. Not the good kind. An investigation revealed they'd been using
A small dermatology practice in Connecticut thought they had HIPAA covered. They had a privacy notice on their website and a shredder in the back
A $4.75 Million Mistake That Started With One Misunderstood Rule In 2022, Memorial Hermann Health System paid a $2.4 million settlement to HHS
A $4.75 Million Fine That Started With One Missing Document In 2023, OCR settled with Lafourche Medical Group for $480,000 after a phishing
A hospital system in the Midwest recently terminated three employees after a post-training assessment revealed they could not correctly identify what constitutes protected health information
In 2023, a mid-size hospital system in the Southeast received a corrective action mandate from OCR after routinely using an outdated, overly broad release form
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over
In February 2024, OCR settled with a small dental practice for $70,000 — not because of a massive data breach, but because the practice couldn&
In February 2024, OCR settled with a New England health system for $1.3 million after investigators found that staff had been accessing patient records
In 2023, OCR settled with a dental practice in New England for $350,000 — not because of a massive data breach, but because the organization
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization disclosed protected health information to a reporter's
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.