HIPAA Journal

APRIL 25, 2023

Five former Methodist Hospital employees have pleaded guilty to criminal violations of HIPAA for accessing and disclosing the information of patients to a third party for financial gain. The former employees were terminated for the HIPAA violations, and along with Harvey, were indicted by a federal grand jury in November 2022.

HIPAA 123

HIPAA Hospitals Compliance 123

HIPAA Journal

NOVEMBER 15, 2022

Five former employees of Methodist Hospital in Tennessee have been indicted by a federal grand jury in Memphis for criminal violations of the Health Insurance Portability and Accountability Act (HIPAA) for impermissibly accessing the protected health information of patients and providing that information to another individual for financial gain.

HIPAA 114

HIPAA Hospitals Health Insurance 114

HIPAA Journal

FEBRUARY 20, 2023

The Department of Health and Human Services’ Office for Civil Rights (OCR) has publicly released two reports that were submitted to Congress that provide insights into data breaches, HIPAA enforcement activity, and the state of HIPAA Privacy and Security Rule compliance for calendar year 2021.

HIPAA 122

HIPAA Compliance 122

HIPAA Journal

DECEMBER 24, 2022

Penalties for HIPAA violations can be issued by the Department of Health and Human Services’ Office for Civil Rights (OCR) and state attorneys general. In addition to financial penalties, covered entities are required to adopt a corrective action plan to bring policies and procedures up to the standards demanded by HIPAA. .

HIPAA 124

HIPAA Compliance Hospitals COVID-19 124

HIPAA Journal

MAY 18, 2023

The Department of Health and Human Services’ Office for Civil Rights is the main enforcer of HIPAA compliance; however, state Attorneys General also play a role in enforcing compliance with the Rules of the Health Insurance Portability and Accountability Act (HIPAA). million individuals and for delayed breach notifications.

HIPAA 103

HIPAA Compliance Ransomware Hospitals 103

HIPAA Journal

JUNE 29, 2023

The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has agreed to settle potential HIPAA violations with the HIPAA business associate, iHealth Solutions, LLC, for $75,000. The HIPAA enforcement action shows that even relatively small data breaches can be investigated by OCR and result in a financial penalty.

HIPAA 107

HIPAA Compliance 107

Bill of Health

DECEMBER 6, 2024

These technologies can act as privacy enhancing techniques (PET) to ensure privacy and compliance with regulations like HIPAA and GDPR. Devices must primarily comply with Regulations (EU) 2017/745 on Medical Devices and 2017/746 on In Vitro Diagnostic Medical Devices.

FDA 182

FDA Governance Compliance Bioethics 182

HIPAA Journal

DECEMBER 31, 2022

All HIPAA covered entities must familiarize themselves with the HIPAA breach notification requirements and develop a breach response plan that can be implemented as soon as a breach of unsecured protected health information (PHI) is discovered. Summary of the HIPAA Breach Notification Rule.

HIPAA 122

HIPAA Compliance Ransomware 122

HIPAA Journal

FEBRUARY 28, 2023

Department of Health and Human Services (HHS) has restructured its Office for Civil Rights (OCR) and has created new divisions that will help improve the enforcement of HIPAA and civil rights laws and clear the current backlog of complaints and investigations. Approximately 80% of all reported data breaches are due to hacking.

HIPAA 111

HIPAA Health Insurance Compliance 111

Healthcare It News

DECEMBER 15, 2021

"Our ability to step up and commit to treating data in a HIPAA-compliant manner opens up a number of new avenues for us to bring our expertise and competitive pricing to new partners," said System1 President of Commerce and Travel, Stewart Marlborough. THE LARGER TREND.

COVID-19 279

COVID-19 Public Health Doctors HIPAA 279

HIPAA Journal

MARCH 26, 2025

Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has confirmed that the long-awaited third phase of its HIPAA compliance audits is underway and will involve HIPAA compliance audits of 50 covered entities and business associates. OCRs workload has increased considerably, yet its budget has remained flat.

HIPAA 72

HIPAA Compliance Ransomware 72

Compliancy Group

JULY 15, 2022

A 2016 hacking incident that hit Oklahoma State University’s Center for Health Sciences has led to an $875,000 HIPAA breach fine settlement to address potential violations. Background of Oklahoma State University HIPAA Breach. The university announced the HIPAA breach on January 5, 2018. failure to perform an evaluation .

HIPAA 97

HIPAA Medicaid Medicaid Compliance 97

HIPAA Journal

JANUARY 2, 2023

The settlements pursued by the Department of Health and Human Services’ Office for Civil Rights (OCR) are for egregious violations of HIPAA Rules. Settlements are also pursued to highlight common HIPAA violations to raise awareness of the need to comply with specific aspects of HIPAA Rules. Are Data Breaches HIPAA Violations?

HIPAA 107

HIPAA Compliance Hospitals Medicare 107

Compliancy Group

JUNE 3, 2022

A recent poll of webinar attendees found that barely one-third may be HIPAA compliant, based upon responses to a single question. Conducting an annual Security Risk Analysis is one of the foundational requirements of HIPAA compliance. Look at the statistics of HIPAA violations and fines. × HIPAA Compliance Simplified.

HIPAA 98

HIPAA Compliance Doctors Governance 98

HIPAA Journal

JANUARY 1, 2023

The majority of HIPAA-covered entities, business associates, and healthcare employees take great care to ensure HIPAA Rules are followed, but what happens when there is accidental HIPAA. How Should Employees Report an Accidental HIPAA Violation? How Should Covered Entities Respond to an Accidental HIPAA Violation?

HIPAA 103

HIPAA Hospitals Compliance Health Insurance 103

Total HIPAA

NOVEMBER 15, 2023

As 2023 unfolds, the urgency for entities in the healthcare sector to initiate or reinforce their HIPAA compliance cannot be overstated. Prove Your Due Diligence The decision to postpone setting up comprehensive policies, procedures, and HIPAA training could be detrimental. This first impression can be pivotal in an audit scenario.

HIPAA 98

HIPAA Compliance Due Diligence Health Insurance 98

HIPAA Journal

JANUARY 6, 2023

Washington Attorney General Bob Ferguson is suing a plastic surgery provider for falsely inflating online ratings, bribing, and threatening patients, and alleges the actions of the practice violated the Health Insurance Portability and Accountability Act (HIPAA) Rules. The lawsuit was filed in the U.S.

HIPAA 100

HIPAA Health Insurance Compliance 100

HIPAA Journal

MARCH 20, 2025

The HIPAA Journal has compiled healthcare data breach statistics from October 2009, when the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) started publishing summaries of healthcare data breaches on its website. This page is regularly updated to reflect the latest healthcare data breach statistics.

HIPAA 111

HIPAA Ransomware Compliance Hospitals 111

Healthcare It News

DECEMBER 5, 2022

Because patient data cannot be shared under HIPAA, consumer data mining practices – which are generally criticized for lacking transparency – have long elicited medical privacy concerns. ON THE RECORD.

Fraud 306

Fraud HIPAA Compliance Hospitals 306

HIT Consultant

OCTOBER 23, 2024

AI Telemedicine solution providers must understand HIPAA and other healthcare regulations to ensure patient data privacy and security. Ha was also recognized among the 50 most influential businesswomen in 2017 and the Top 20 professional female managers by Forbes Vietnam in 2022.

Telemedicine 124

Telemedicine Electronic Medical Records Doctors COVID-19 124

HIPAA Journal

MAY 9, 2023

The HHS’ Office for Civil Rights has announced its 44th enforcement action under its HIPAA Right of Access initiative with a $15,000 financial penalty for David Mente, MA, LPC, a licensed counselor that provides psychotherapy services in Pittsburgh, PA. The HIPAA Right of Access allows individuals to obtain a copy of their health information.

HIPAA 75

HIPAA Licensing Compliance 75

Bill of Health

APRIL 4, 2024

Beyond the health care sector-specific Medical Devices Regulation (EU) 2017/745 (MDR) and the In Vitro Diagnostic Medical Devices Regulation (EU) 2017/746 (IVDR), this mix of AI & Data related regulatory requirements stems from a series of generalized, cross-sectoral EU laws of the last 5 years. Sectoral US Laws In the U.S.,

FDA 288

FDA Malpractice Regulatory Compliance Health Insurance 288

HIPAA Journal

MARCH 23, 2022

a Pittsburgh, PA-based non-profit healthcare company and Integrated Delivery Network has recently announced that some HIPAA-protected data has been exposed in a data breach at the printing and mailing vendor, Quantum Group, which was used by its vendor, Webb Mason, which provides marketing services to Highmark. Highmark Inc.,

HIPAA 136

HIPAA Licensing Health Insurance Governance 136

HIPAA Journal

DECEMBER 14, 2022

The HHS’ Office for Civil Rights (OCR) has announced a settlement has been reached with a Californian dental practice to resolve multiple HIPAA violations that were identified during investigations of a complaint about impermissible disclosures of protected health information on the review platform Yelp.

HIPAA 106

HIPAA Compliance 106

HIPAA Journal

JULY 3, 2024

A Seattle, WA, plastic surgery practice has been ordered to pay a financial penalty of $5 million to the Office of the Washington Attorney General to resolve alleged violations of the Health Insurance Portability and Accountability Act (HIPAA), Washington Consumer Protection Act (CPA), and the federal Consumer Review Fairness Act (CRFA).

HIPAA 117

HIPAA Health Insurance Doctors Compliance 117

Health Populi

JANUARY 28, 2020

The same percentage of people over 50 own a voice assistant, a market penetration rate which more than doubled between 2017 and 2019, AARP noted in the 2020 Tech and the 50+ Survey published in December 2019. Under the current privacy regime of HIPAA for healthcare, indeed, we are. legislators can get on the same privacy page.

HIPAA 169

HIPAA Health Insurance Doctors 169

Compliancy Group

DECEMBER 10, 2024

In early December of 2024, the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced it has issued a $548,625 civil monetary penalty (CMP) against Childrens Hospital Colorado (CHC), for the latters HIPAA compliance trip-ups: violations of the HIPAA Privacy and Security Rules.

Hospitals 98

Hospitals US Department of Health and Human Services HIPAA Compliance 98

HIPAA Trek

OCTOBER 7, 2024

The Office for Civil Rights (OCR) audits you hoped were a thing of the past—having been discontinued since 2017—are returning. All covered entities will be subject to these HIPAA audits, and they are due to start any day now. What does that mean for you as a compliance officer?

HIPAA 52

HIPAA Compliance Officers Compliance 52

HIPAA Journal

APRIL 14, 2023

Monument explained in its breach notification letters that an internal review was conducted in late 2022 into the use of website tracking tools after guidance was issued by the HHS’ Office for Civil Rights on pixels and other tracking tools and how they may violate the HIPAA Rules. Monument acquired Tempest in May 2022.

HIPAA 112

HIPAA Hospitals 112

Compliancy Group

SEPTEMBER 18, 2024

The HITECH Act requires the Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) to conduct periodic audits of HIPAA covered entity and business associate compliance with the HIPAA Privacy, Security, and Breach Notification Rules. Subsequently, OCR evaluated the effectiveness of the pilot HIPAA audit program.

HIPAA 52

HIPAA Compliance Health Insurance 52

HIPAA Journal

APRIL 19, 2022

A study conducted by Bai, Jiang, and Flasher in 2017 found the risk of data breaches was higher at large academic medical centers than at other hospitals. The post On-the-spot Email Interventions Reduce Repeat Medical Record Snooping Incidents by 95% appeared first on HIPAA Journal.

Electronic Medical Records 134

Electronic Medical Records HIPAA Hospitals Compliance 134

HIPAA Journal

FEBRUARY 2, 2023

In September 2021, the FTC issued a policy statement announcing its intention to start actively enforcing the Health Breach Notification Rule with a focus on health apps, which are generally not covered by HIPAA and data breaches are therefore not subject to the notification requirements of the HIPAA Breach Notification Rule.

Prescription Drug Pricing 111

Prescription Drug Pricing HIPAA Compliance Telemedicine 111

HIPAA Journal

AUGUST 3, 2022

Aetna also experienced another mailing-related data breach in 2017 that affected 12,000 individuals. The post 326,278 Aetna ACE Members Affected by Ransomware Attack at Mailing Vendor appeared first on HIPAA Journal. EyeMed was fined $600,000 by the New York State Attorney General for security failures that led to the data breach.

Ransomware 143

Ransomware HIPAA Health Insurance 143

HIPAA Journal

MARCH 11, 2022

The report includes healthcare data breaches reported to regulators, as well as data breaches that have been reported in the media, incidents that have not been disclosed by the breached entity, and data breaches involving healthcare data at non-HIPAA-regulated entities. The data for the report was provided by databreaches.net.

HIPAA 114

HIPAA Ransomware Health Insurance 114

HIPAA Journal

JUNE 2, 2023

An Arizona man has been sentenced to 54 months in jail for aggravated identity theft and criminal violations of the Health Insurance Portability and Accountability Act (HIPAA). Rico Prunty pleaded guilty to aggravated identity theft and criminal HIPAA violations for accessing and disclosing patients’ protected health information.

HIPAA 56

HIPAA Fraud Health Insurance Compliance 56

Compliancy Group

OCTOBER 31, 2022

HIPAA requires healthcare organizations to report security incidents to the Office for Civil Rights (OCR). HIPAA defines a security incident as “ the attempted or successful unauthorized access, use, disclosure, modification, or destruction of information or interference with system operations in an information system.”. We can help!

HIPAA 52

HIPAA Ransomware Compliance Hospitals 52

HIPAA Journal

MARCH 2, 2022

While attacks involving these malware variants are currently concentrated in Ukraine, in 2017, NotPetya wiper malware was used in targeted attacks in Ukraine and was delivered through compromised tax software, but attacks involving the malware spread globally and affected multiple healthcare organizations in the United States.

US Department of Health and Human Services 136

US Department of Health and Human Services Ransomware Governance HIPAA 136