HIPAA Security Rule requirements and implementation
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed that not a single member of their workforce could correctly
In 2023, OCR settled with a Florida-based health system for $1.2 million after investigators found that the organization lacked a qualified individual overseeing its
In March 2024, OCR settled with a healthcare provider for $950,000 after an investigation revealed the organization had failed to conduct a risk analysis
In February 2023, OCR settled with a healthcare provider for $1.25 million after determining the organization had never conducted a comprehensive risk analysis — despite
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee accessed and sold the electronic protected health
In 2023, OCR settled with a dental practice in New England for $50,000 — not because they lacked policies, but because the policies they had
Every year, thousands of people search for hippa policies — a common misspelling of HIPAA, the Health Insurance Portability and Accountability Act. Whether you arrived here
In February 2024, OCR announced a $480,000 settlement with a New England dermatology practice that failed to implement even basic security measures after a
In 2023, OCR settled with a dental practice in New England for $350,000 after an investigation revealed that staff members had been sharing patient
In December 2023, HHS published a Notice of Proposed Rulemaking (NPRM) that would represent the most significant overhaul of the HIPAA Security Rule since its
In 2023, OCR settled with a New England dermatology practice for $300,640 after an unencrypted thumb drive containing the protected health information of over
When OCR announced in late 2023 that the COVID-era telehealth enforcement discretion would not last forever, many healthcare organizations realized they had been operating telemedicine
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.