HIPAA Paperwork
HIPAA Paperwork: What Your Organization Actually Needs
When OCR investigators arrive at a covered entity's door — whether triggered by a patient complaint or a reported breach — the first thing they
Tag
Privacy Rule
HIPAA Privacy Rule requirements and guidance
HIPAA Patient Form
HIPAA Patient Form: What Your Practice Must Include
In January 2024, OCR settled with a dental practice in New England for $50,000 after investigators discovered the organization had been using a HIPAA
HIPAA Policy
HIPAA Policy Sample: What Your Organization Actually Needs
When OCR investigated Anthem Inc. and imposed a record $16 million settlement in 2018, the enforcement action didn't just cite a data breach.
HIPAA Practice Exam
HIPAA Practice Exam: Test Your Compliance Knowledge
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed that not a single member of their workforce could correctly
HIPAA Privacy Certification
HIPAA Privacy Certification: What Your Workforce Needs
In February 2024, OCR settled with a New England dermatology practice for $300,000 after an investigation revealed that workforce members had never completed documented
HIPAA Privacy Policies
HIPAA Privacy Policies: What Your Organization Must Include
In 2023, OCR settled with a dental practice in New England for $350,000 after investigators discovered the organization had no written policies governing the
HIPAA Professional
HIPAA Professional: What It Takes to Lead Compliance
In 2023, OCR settled with a Florida-based health system for $1.2 million after investigators found that the organization lacked a qualified individual overseeing its
HIPAA Protected Information
HIPAA Protected Information: What Counts and What Doesn't
In 2023, a dental practice in New England paid $50,000 to settle an OCR investigation after a workforce member posted a patient's
HIPAA Requirements
What HIPAA Requires: Obligations Every Covered Entity Must Meet
In March 2024, OCR settled with a healthcare provider for $950,000 after an investigation revealed the organization had failed to conduct a risk analysis
HIPAA Template
HIPAA Template: What Your Policies Actually Need
In 2023, OCR settled with a dental practice in New England for $50,000 — not because they lacked policies, but because the policies they had
HIPAA Voicemail
HIPAA Voicemail Rules: What You Can and Cannot Say
In 2022, a specialty clinic in the Midwest faced an OCR complaint after a staff member left a detailed voicemail on a patient's
HIPAA Whistleblower
HIPAA Whistleblower Protections: What Your Team Must Know
In 2023, a hospital system in the Midwest terminated a compliance analyst who reported suspected HIPAA violations to the Office for Civil Rights. The organization