HIPAA Basics
What Is the HIPAA? A Practical Compliance Guide
In February 2023, OCR settled with a dental practice in New England for $23,000 after a patient complaint revealed the organization had no written
Tag
Workforce Training
Healthcare workforce HIPAA training strategies and solutions
HIPAA Compliance
What Is the HIPAA Compliance Framework? A Full Guide
In February 2024, OCR announced a $480,000 settlement with a New England dermatology practice that failed to conduct an enterprise-wide risk analysis — a core
HIPAA Privacy Rule
What Is the Privacy Rule Responsible for Protecting?
In 2023, OCR settled with Yakima Valley Memorial Hospital for $240,000 after 23 security guards were found snooping through patient medical records without a
Anti-Kickback Statute
What Law Prohibits Offering Payment to Induce Referrals
In 2023, the Department of Justice recovered over $2.68 billion in judgments and settlements involving healthcare fraud — a significant portion tied to illegal referral
HIPAA Enforcement
What Office Enforces HIPAA and How They Hold You Accountable
In February 2023, the Office for Civil Rights (OCR) announced a $1.3 million settlement with a health plan that failed to provide timely access
HIPAA Violation
What's a HIPAA Violation? Real Examples and Penalties
In February 2023, OCR settled with Banner Health for $1.25 million after a phishing attack exposed the protected health information of nearly 3 million
HIPAA Privacy Rule
When Can a Covered Entity Disclose PHI Legally?
In 2023, OCR settled with a dental practice for $350,000 after the organization disclosed a patient's protected health information to a third-party
HIPAA Privacy Rule
When Can You Use or Disclose PHI: A Compliance Guide
In 2023, OCR settled with a dental practice for $350,000 after the organization disclosed a patient's protected health information to a third-party
HIPAA Certification
Where Can I Get HIPAA Certification? A Compliance Expert's Guide
Every week, at least one compliance officer or new hire sends me some version of the same question: where can I get HIPAA certification? The
Technical Safeguards
Which Action Would Be Considered a Technical Safeguard
In 2023, OCR settled with a health system for $1.3 million after investigators found the organization had failed to implement basic access controls on
Protected Health Information
Which Is Not Considered Protected Health Information
In 2023, OCR settled with a covered entity for $1.3 million after an investigation revealed the organization had misclassified certain data as non-PHI — and
Protected Health Information
Which Items Are Considered PHI Under HIPAA Rules
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had been disclosing patient names, treatment records, and