HIPAA Privacy Rule

OCR Settles 20th HIPAA Right of Access Case With Nebraska Hospital

by Jill McKeon

The HHS Office for Civil Rights (OCR) settled its twentieth case under the HIPAA Right of Access Initiative, marked by an $80,000 civil monetary penalty paid by Nebraska-based Children’s Hospital...

Common Misconceptions About HIPAA and COVID-19 Vaccination Status

by Jill McKeon

The HIPAA Privacy Rule does not protect one’s COVID-19 vaccination status, despite popular misconceptions. As HIPAA turns 25 this year, common misinterpretations of the law persist, a blog post...

How Do New Patient Right of Access Policies Impact HIPAA?

by Jill McKeon

It’s been 25 years since HIPAA was signed into law, but new patient right of access policies have experts questioning the future of HIPAA and third-party data sharing, according to a recent op-ed...

Colorado Governor Signs The Colorado Privacy Act Into Law  

by Lisa Gentes-Hunt

Colorado Governor Jared Polis signed the Colorado Privacy Act (CPA) into law on July 8, adding protections for Colorado consumer’s data and...

OCR Settles With West Virginia-Based DELC for HIPAA Right of Access Failure

by Jessica Davis

The Department of Health and Human Services Office for Civil Rights announced it reached a settlement with West Virginia specialist Diabetes, Endocrinology & Lipidology Center (DELC) for $5,000, to...

HHS’ Proposed HIPAA Right of Access Changes: CHIME, ABHW Weigh in

by Jessica Davis

CHIME and the Association for Behavioral Health and Wellness sent letters to the Department of Health and Human Services, in response to proposed changes to HIPAA. Among a range of concerns are...

OCR Settles With NJ Specialist for Over HIPAA Right of Access Failure

by Jessica Davis

The Department of Health and Human Services Office for Civil Rights announced it reached a settlement with Village Plastic Surgery (VPS) to resolve potential violations of the HIPAA right of access...

Arbour Hospital Pays OCR $65K Over HIPAA Right of Access Violation

by Jessica Davis

The Department of Health and Human Services announced it reached a $65,000 settlement with Massachusetts-based Arbour Hospital, which resolved potential violations of the HIPAA right of access...

HHS Extends Comment Period for HIPAA Privacy Rule Changes

by Jessica Davis

The Department of Health and Human Services Office for Civil Rights announced it has extended the comment period for proposed changes to the HIPAA Privacy Rule. Proposed in December 2020, the changes...

$70K OCR Penalty for Sharp Health Over HIPAA Right of Access Failures

by Jessica Davis

California-based Sharp HealthCare, doing business as Sharp Rees-Stealy Medical Centers (SRMC), has agreed to a corrective action plan and to pay the Office for Civil Rights a $70,000 civil monetary...

Renown Health Pays OCR $75K for HIPAA Right of Access Failure

by Jessica Davis

The Office for Civil Rights reached a $75,000 civil monetary penalty and corrective action plan with Nevada-based Renown Health, to settle a potential violation of the HIPAA right of access...

Judge Vacates $4.3M OCR Penalty Against MD Anderson Over Data Loss

by Jessica Davis

The US Court of Appeals for the Fifth Circuit has vacated the $4.3 million civil monetary penalty against the University of Texas MD Anderson Cancer Center after two years and several lost appeals. The...

Banner Health to Pay OCR $200K for HIPAA Right of Access Failures

by Jessica Davis

The Department of Health and Human Services Office for Civil Rights reached a $200,000 civil monetary penalty and a corrective action plan with Banner Health, to resolve potential violations of the...

Elite Primary Care Pays OCR $36K for HIPAA Right of Access Violation

by Jessica Davis

Elite Primary Care in Georgia has agreed to a $36,000 settlement with the Office for Civil Rights to resolve a potential violation of the HIPAA Privacy Rule's right of access...

HHS Proposes HIPAA Privacy Rule Changes, Improving Right of Access

by Jessica Davis

The Department of Health and Human Services Office for Civil Rights released a set of proposed changes to the HIPAA Privacy Rule, which take aim at Right of Access rules and are designed to reduce...

OCR Settles with Psychiatric Provider for HIPAA Right of Access Violation

by Jessica Davis

The Department of Health and Human Services Office for Civil Rights announced it reached a $25,000 settlement with California-based Riverside Psychiatric Medical Group...

Wakefern, ShopRite Pay New Jersey $235K for Fraud Act, HIPAA Violations

by Jessica Davis

The New Jersey Division of Consumer Affairs and NJ Attorney General Gurbir Grewal announced a settlement with Wakefern Food Corp and two associated ShopRite supermarkets to resolve...

New Haven Pays OCR $202K for PHI Breach of 498 Patients, HIPAA Failure

by Jessica Davis

The Office for Civil Rights reached a settlement with the city of New Haven, Connecticut, including a $202,400 civil monetary penalty and a corrective action plan, following a...

Aetna to Pay OCR $1M Over 3 Patient Data Breaches, HIPAA Violations

by Jessica Davis

The Department of Health and Human Services Office for Civil Rights announced it reached a $1 million settlement with Aetna to resolve potential HIPAA violations stemming from three...

3 Compliance Considerations for HIPAA-Required Breach Response

by Jessica Davis

In the wake of a breach, navigating a response to quickly eradicate the hackers from the network and reduce the impact of an attack is no easy feat. But in the healthcare sector, ensuring a...