HIPAA Security Rule risk analysis requirements, methodologies, and compliance strategies
In 2023, OCR settled with a healthcare provider for $1.3 million after an investigation revealed the organization had failed to implement even basic technical
When OCR settled with Premera Blue Cross for $6.85 million in 2020, the root cause wasn't a single missing firewall or an
In January 2025, HHS confirmed that the temporary telehealth enforcement discretion introduced during the COVID-19 public health emergency has ended. That means every healthcare organization
When OCR announced in late 2024 that the pandemic-era telehealth enforcement discretion would not be extended indefinitely, hundreds of healthcare organizations suddenly realized they had
When OCR settled with a behavioral health provider in 2023 for $125,000 after a therapist conducted sessions over a consumer-grade video platform without a
OCR's $4.75 Million Settlement Exposed a Training Failure In 2022, OCR settled with a major health system for $4.75 million after
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee sold protected health information of over 12,
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million patients. The root cause wasn'
In October 2023, OCR settled with a healthcare system in Louisiana for $480,000 after a phishing attack compromised the protected health information of over
In February 2024, OCR settled with a healthcare provider for $4.75 million after an investigation revealed systemic failures across nearly every major HIPAA requirement
In late 2023, a large health system deployed a generative AI chatbot to assist clinical staff with documentation. Within weeks, workforce members were pasting entire
In 2022, OCR settled with a health plan for $875,000 after an investigation revealed that protected health information stored in a cloud environment lacked
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.