HIPAA Basics
What Is the HIPAA? A Practical Compliance Guide
In February 2023, OCR settled with a dental practice in New England for $23,000 after a patient complaint revealed the organization had no written
Tag
Privacy Rule
HIPAA Privacy Rule requirements and guidance
PHI
What's Considered PHI Under HIPAA: A Practical Guide
In 2023, OCR settled with a dental practice for $350,000 after an impermissible disclosure involving patient appointment data — information the practice didn't
HIPAA Violation
What's a HIPAA Violation? Real Examples and Penalties
In February 2023, OCR settled with Banner Health for $1.25 million after a phishing attack exposed the protected health information of nearly 3 million
Protected Health Information
Which Is Not Considered Protected Health Information
In 2023, OCR settled with a covered entity for $1.3 million after an investigation revealed the organization had misclassified certain data as non-PHI — and
HIPAA Rules
5 Rules of HIPAA: What Every Covered Entity Must Know
In 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed failures across multiple HIPAA requirements
HIPAA Authorization
Authorization for Release of Health Information Form
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization disclosed protected health information to a patient's
HIPAA Release Form
Blank HIPAA Release Form: What You Must Include
In 2023, OCR settled with a covered entity for over $100,000 after the organization disclosed protected health information without a valid authorization — partly because
HIPAA Release Form
Generic HIPAA Release Form: What You Must Know
In 2023, OCR settled with a healthcare provider for $50,000 after determining that the organization had disclosed protected health information using an authorization form
HIPAA and Mental Health
HIPAA and Mental Health Records: What Providers Must Know
In 2022, a behavioral health provider in New England paid a six-figure settlement to OCR after a workforce member disclosed a patient's substance
HIPAA Compliance
HIPAA Compliance in Medical Office: A Practical Guide
In 2023, OCR settled with a solo dental practice in Indiana for $50,000 after a patient complaint revealed the office had no written policies,
HIPAA Compliance
HIPAA Compliance Privacy Rule: What Your Organization Gets Wrong
In February 2024, OCR settled with a New England dermatology practice for $300,000 after determining the organization had disclosed protected health information to a
HIPAA Compliance
HIPAA Compliance Release Form: What You Must Include
In 2023, OCR settled with a covered entity for $40,000 after an investigation revealed the organization had disclosed protected health information without a valid