Notice of Privacy Practices
The Blank Describes How PHI May Be Used Under HIPAA
If you've encountered the question "the blank describes how PHI may be used" in a HIPAA training module or certification exam,
Tag
Workforce Training
Healthcare workforce HIPAA training strategies and solutions
OCR Enforcement
The HHS Office for Civil Rights Is Charged with Protecting PHI
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of 12,
HITECH Act
The HITECH Act Introduced Penalties for HIPAA Violations Based On Tiered Culpability
In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3 million appeal after OCR determined that three data breaches involving unencrypted
HIPAA Compliance
The Importance of HIPAA: What Every Healthcare Org Must Know
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed massive gaps in risk
Minimum Necessary Standard
The Minimum Necessary Rule Refers To: A Practical Guide
In 2022, OCR settled with a dental practice for $25,000 after an investigation revealed the organization had disclosed an entire patient medical record to
Minimum Necessary Standard
The Minimum Necessary Standard Means To Limit PHI Access
In 2023, OCR settled with a covered entity for over $100,000 after an investigation revealed that employees were routinely accessing patient records unrelated to
HIPAA Security Rule
The Security Rule Requires Three Safeguards: What to Know
When OCR investigated Premera Blue Cross in 2020, the resulting $6.85 million settlement exposed failures across every category of protection the HIPAA Security Rule
HIPAA Rules
The Three Parts of HIPAA Are: What Every Organization Must Know
In 2023, OCR settled with a dental practice for $350,000 after investigators discovered the organization had no written security policies, no risk analysis, and
HIPAA Rules
Three HIPAA Rules Every Covered Entity Must Follow
In February 2023, OCR settled with a healthcare provider for $1.25 million after investigators found failures spanning all three HIPAA rules — inadequate safeguards for
HIPAA Rules
Three Primary Rules of HIPAA: What Your Organization Must Know
In February 2023, OCR settled with Banner Health for $1.25 million after a breach affecting nearly 3 million individuals exposed failures across multiple HIPAA
HIPAA Training
Training Requirements Include Volunteers Under the Direction of an Entity
In 2023, OCR investigated a mid-size hospital that suffered a breach traceable to a volunteer who accessed patient records without authorization. The hospital argued the
HIPAA Violations
Types of HIPAA Violations: A Breakdown for 2024
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a workforce member stole the protected health information of over