HIPAA Policy
HIPAA Policy Sample: What Your Organization Actually Needs
When OCR investigated Anthem Inc. and imposed a record $16 million settlement in 2018, the enforcement action didn't just cite a data breach.
Tag
Protected Health Information
A collection of 212 posts
HIPAA Policy Templates
HIPAA Policy Templates Free: Why Free Isn't Compliant
In 2023, a small specialty clinic in the Southeast received a corrective action plan from OCR after a breach investigation revealed that their "policies
HIPAA Privacy Certification
HIPAA Privacy Certification: What Your Workforce Needs
In February 2024, OCR settled with a New England dermatology practice for $300,000 after an investigation revealed that workforce members had never completed documented
HIPAA Protected Information
HIPAA Protected Information: What Counts and What Doesn't
In 2023, a dental practice in New England paid $50,000 to settle an OCR investigation after a workforce member posted a patient's
HIPAA Breach Notification
HIPAA Reporting a Breach: Timelines, Steps, and Pitfalls
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee accessed and sold protected health information (PHI)
HIPAA Right of Access
HIPAA Right of Access: What Your Organization Must Know
In 2019, the Office for Civil Rights (OCR) launched its HIPAA Right of Access Initiative — and since then, it has settled or imposed penalties in
HIPAA Security Officer Training
HIPAA Security Officer Training: What Your Role Demands
In 2023, OCR settled with a small health plan in Louisiana for $55,000 after an investigation revealed the organization had never designated a security
HIPAA Text Messages
HIPAA Text Messages: Rules for Texting PHI Securely
In 2023, a regional health system paid $850,000 to settle an OCR investigation that traced a data breach back to a single unsecured text
HIPAA Training
HIPAA Training Classes: What Your Workforce Actually Needs
In 2023, OCR settled with a Louisiana medical group for $480,000 after an investigation revealed — among other failures — that the organization had never implemented
HIPAA Training
HIPAA Training for Employees Free: What You Need to Know
In 2023, OCR settled with a Florida dental practice for $30,000 after an investigation revealed that multiple workforce members had never received HIPAA training
HIPAA Training
HIPAA Training Programs: What OCR Expects in 2024
When OCR settled with a Florida dental practice for $62,500 in 2023, the root cause wasn't a sophisticated cyberattack or a rogue
HIPAA Violation
HIPAA Violation California: What Providers Must Know
In 2023, a mid-size California medical group agreed to a $240,000 settlement with OCR after an employee accessed patient records without authorization for over