How Long Is PHI Protected After Death? The 50-Year Rule
A Funeral Home Called Me About a HIPAA Violation A few years ago, I got a call from an administrator at a mid-size hospital system.
A collection of 289 posts
A Funeral Home Called Me About a HIPAA Violation A few years ago, I got a call from an administrator at a mid-size hospital system.
A front-desk employee at a small cardiology practice in Texas emailed a spreadsheet of patient names, diagnoses, and Social Security numbers to her personal Gmail
A hospital employee in Texas once posted a photo of a whiteboard in a break room. In the background, barely legible, was a patient'
A therapist in a small group practice mentioned a patient's name and diagnosis to a colleague in a crowded elevator. No chart was
A Patient's Name on a Sign-In Sheet Cost One Practice $125,000 I got a call from a clinic manager who was genuinely
A hospital employee in Texas forwarded a patient's appointment confirmation to a personal email so she could "follow up from home."
A hospital employee in Texas looked up her ex-husband's medical records on a slow Tuesday afternoon. No clinical reason. No authorization. Just curiosity.
In January 2021, something shifted in HIPAA enforcement that most compliance officers still haven't fully absorbed. Congress passed the HITECH Amendment — Public Law
A dermatology practice in New England thought appointment reminder postcards were harmless. They listed the patient's name, the date of their next visit,
A surgeon's scheduling whiteboard in a busy hallway. A screenshot of a patient portal texted between nurses. A spreadsheet of lab results emailed
A pediatric clinic in Texas thought they were fully covered. They had general liability, malpractice, even an umbrella policy. Then a stolen laptop exposed the
A hospital receptionist emails a patient's lab results to the wrong address. A therapist discusses a case by name in a crowded elevator.
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.