Privacy Rule
Privacy Rule Grant to Patients: Rights You Must Honor
In 2023, OCR settled with a health system for $40,000 after it failed to provide a patient timely access to her own medical records
Tag
Protected Health Information
A collection of 228 posts
HITECH Act
Purpose of the HITECH Act: What It Means for HIPAA
In February 2011, Cignet Health of Prince George's County, Maryland, received a $4.3 million civil money penalty from the Office for Civil
Release of Information
Release of Information Form HIPAA: What You Must Include
In 2023, a mid-sized hospital system in the Midwest paid $125,000 to settle an OCR investigation after it disclosed patient records based on an
Release of Information
Release of Information HIPAA Rules You Must Follow
In 2023, OCR settled with a New England dermatology practice for $300,640 after the organization failed to provide a patient timely access to their
HIPAA Violation
How to Report a HIPAA Violation: A Step-by-Step Guide
In January 2024, a medical receptionist in Texas discovered her supervisor was accessing patient records for personal reasons — looking up neighbors, family members, even local
Safe Harbor Method
Safe Harbor Method HIPAA: De-Identification Guide
In 2023, OCR investigated a research institution that published a dataset it believed was fully de-identified — only to discover that zip codes and dates of
Telehealth Compliance
Telehealth Compliance: What HIPAA Requires in 2025
When HHS announced in late 2024 that the COVID-era telehealth enforcement discretion would not be extended indefinitely, many healthcare organizations realized they had been operating
Telehealth HIPAA
Telehealth HIPAA Rules Your Organization Must Follow
When OCR announced in May 2023 that the COVID-era telehealth HIPAA enforcement discretion was ending, thousands of healthcare organizations realized they had been operating on
HIPAA Texting
Texting Patient Information Is Allowed When These Rules Apply
In 2023, a small dental practice in Texas received a $50,000 settlement with OCR after a staff member routinely texted patient appointment details, diagnoses,
HIPAA Compliance
The Act That Prohibits the Practice of Kickbacks Is
In 2023, the Department of Justice recovered over $2.68 billion in settlements and judgments related to healthcare fraud — and a significant portion of those
Notice of Privacy Practices
The Blank Describes How PHI May Be Used Under HIPAA
If you've encountered the question "the blank describes how PHI may be used" in a HIPAA training module or certification exam,
OCR Enforcement
The HHS Office for Civil Rights Is Charged with Protecting PHI
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of 12,