HIPAA Law Cases
HIPAA Law Cases That Changed Enforcement Forever
In February 2023, Banner Health agreed to a $1.25 million settlement with the Office for Civil Rights after a 2016 breach exposed the protected
Tag
Protected Health Information
A collection of 241 posts
HIPAA Laws
What HIPAA Laws Protect and How to Stay Compliant
In January 2024, OCR settled with a New England dermatology practice for $300,000 after a breach exposed the electronic protected health information of nearly
HIPAA Mental Health Records
HIPAA Mental Health Records: Privacy Rules You Must Know
In 2022, OCR settled with a New England dermatology practice for $300,640 after a breach exposed patient records — including sensitive mental health information — that
HIPAA Need to Know
HIPAA Need to Know: The Minimum Necessary Standard
In 2023, OCR settled with a health system for $1.3 million after an investigation revealed that employees across multiple departments had unrestricted access to
HIPAA Paper Records
HIPAA Paper Records: Safeguards You Can't Ignore
In 2018, OCR settled with Filefax Inc. for $100,000 after the company left medical records — paper records containing protected health information — sitting in an
HIPAA Policy
HIPAA Policy Sample: What Your Organization Actually Needs
When OCR investigated Anthem Inc. and imposed a record $16 million settlement in 2018, the enforcement action didn't just cite a data breach.
HIPAA Policy Templates
HIPAA Policy Templates Free: Why Free Isn't Compliant
In 2023, a small specialty clinic in the Southeast received a corrective action plan from OCR after a breach investigation revealed that their "policies
HIPAA Privacy Certification
HIPAA Privacy Certification: What Your Workforce Needs
In February 2024, OCR settled with a New England dermatology practice for $300,000 after an investigation revealed that workforce members had never completed documented
HIPAA Protected Information
HIPAA Protected Information: What Counts and What Doesn't
In 2023, a dental practice in New England paid $50,000 to settle an OCR investigation after a workforce member posted a patient's
HIPAA Breach Notification
HIPAA Reporting a Breach: Timelines, Steps, and Pitfalls
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee accessed and sold protected health information (PHI)
HIPAA Right of Access
HIPAA Right of Access: What Your Organization Must Know
In 2019, the Office for Civil Rights (OCR) launched its HIPAA Right of Access Initiative — and since then, it has settled or imposed penalties in
HIPAA Security Officer Training
HIPAA Security Officer Training: What Your Role Demands
In 2023, OCR settled with a small health plan in Louisiana for $55,000 after an investigation revealed the organization had never designated a security