Healthcare organizations that fail to meet HIPAA Privacy, Security, or Breach Notification Rules can face HIPAA violation fines. Find out who has been fined and how they could have prevented penalties.
The Breach that Launched the Investigation In March 2020, Northeast Radiology, P.C. (NERAD) filed a breach report with the OCR. In its report, NERAD noted that an unauthorized party [...]
The OCR launched its Risk Analysis Initiative to focus investigations on compliance with the provision, as it is the foundation for effectively protecting electronic protected health information (ePHI), and [...]
HHS Imposes $200,000 HIPAA Right of Access Civil Monetary Penalty: A Representative Case HIPAA’s Privacy Rule contains an “Access of individuals to protected health information” provision, known as the [...]
Warby Parker, more prosaically, is a covered entity under HIPAA. In late February of 2025, the Department of Health and Human Services’ Office for Civil Rights (OCR) announced that [...]
NESG agreed to settle allegations of noncompliance with the HIPAA security risk analysis violation. The settlement marks OCR’s 10th ransomware enforcement action, and the 4th enforcement action in OCR’s [...]
The agreement marks OCR’s 52nd right of access enforcement action. The first of these enforcement actions dates all the way back to September of 2019. Details of the right [...]
While not all breaches result in OCR settlements, when an organization fails to meet HIPAA requirements, it is often subject to civil monetary penalties and corrective action plans, which [...]
OCR Settles HIPAA Investigation With Business Associate for $337,750: Copy That OCR began its HIPAA investigation following the receipt of a breach report filed by USR in February of [...]
After receiving a complaint that Cascade Eye and Skin Centers allegedly suffered a ransomware incident, OCR launched an investigation into the healthcare provider. During the investigation, it was found [...]
The Complaint and the Settlement A patient requested a copy of their medical records from American Medical Response (AMR). After several attempts, and AMR’s failure to provide the records, [...]
© 2025 Compliancy Group LLC. All Rights Reserved | Terms of Use | Privacy Policy | Audit Response Terms of Use
