HIPAA in Health Care: What Every Organization Must Know
In February 2024, OCR announced a $4.75 million settlement with a hospital system that failed to conduct an enterprise-wide risk analysis — a requirement that
Healthcare workforce HIPAA training strategies and solutions
In February 2024, OCR announced a $4.75 million settlement with a hospital system that failed to conduct an enterprise-wide risk analysis — a requirement that
When OCR issues a corrective action plan or levies a six-figure penalty, the enforcement letter doesn't reference some obscure regulation — it cites the
In 2023, OCR settled with a healthcare system for $1.3 million after an investigation revealed that a single misconfigured server — one that the IT
In February 2024, OCR settled with a small dental practice for $70,000 — not because of a massive data breach, but because the practice couldn&
When OCR investigated a midsize hospital system in 2023, investigators didn't just ask about the breach itself — they asked for six years of
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over
In 2019, OCR settled with a dental practice in Texas for $10,000 after an investigation revealed the office had no written HIPAA policies, no
In February 2024, OCR settled with a New England health system for $1.3 million after investigators found that staff had been accessing patient records
In 2023, a Texas hospital reported a breach after a nurse accessed the medical records of a coworker's ex-spouse out of curiosity — not
When OCR announced a $4.8 million settlement with New York-Presbyterian Hospital and Columbia University in 2014, the enforcement action underscored a regulatory landscape that
In February 2024, OCR settled with a healthcare provider for $480,000 after an investigation revealed that their online patient portal lacked basic encryption safeguards
In 2023, OCR settled with a dental practice in New England for $350,000 — not because of a massive data breach, but because the organization
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.