HIPAA Privacy Violation
HIPAA Privacy Violation: What Triggers OCR Enforcement
In February 2024, a small dental practice in New England agreed to a $50,000 settlement with the Office for Civil Rights after a former
Tag
Workforce Training
Healthcare workforce HIPAA training strategies and solutions
HIPAA Privacy Violations
HIPAA Privacy Violations: How They Happen and How to Prevent Them
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a hospital employee sold protected health information (PHI) of over
HIPAA Protection Rule
HIPAA Protection Rule: What Your Organization Must Do
In February 2024, OCR announced a $4.75 million settlement with a healthcare system that failed to implement even basic safeguards for protected health information.
HIPAA Basics
HIPAA Protects a Category of Information Known as PHI
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had no clear understanding of what data it
HIPAA Record Storage
HIPAA Record Storage Requirements: What You Must Keep
In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed that records containing protected health information were stored
HIPAA Records Retention
HIPAA Records Retention Policy: What You Must Keep
In 2023, a mid-sized clinic in the Southeast received a records request from OCR during a compliance review — and couldn't produce its risk
HIPAA Release of Information
HIPAA Release of Information Requirements Explained
In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed the organization had disclosed protected health information to
HIPAA Requirements
HIPAA Requirement Basics Every Covered Entity Must Know
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over
HIPAA Data Storage
HIPAA Requirements for Data Storage: A Practical Guide
In June 2023, OCR settled with a dental practice for $350,000 after an investigation revealed unencrypted patient records stored on a network server with
HIPAA Retention Policy
HIPAA Retention Policy: What You Must Keep and For How Long
In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization had no documentation of its risk analysis, policies,
HIPAA Risk Assessment
HIPAA Risk Assessment Requirement: What OCR Expects
In February 2023, OCR settled with a health system for $1.25 million after investigators found a fundamental gap: the organization had never conducted a
HIPAA Risks
HIPAA Risks Every Healthcare Organization Must Address
In February 2024, OCR announced a $4.75 million settlement with a hospital system that had failed to conduct an enterprise-wide risk analysis for over