Federal (United States)
Enforcement actions
140 sections
140 sections
- Resolution Agreement, OCR Concludes 2018 with All-Time Record Year for HIPAA EnforcementOCR Concludes 2018 with All-Time Record Year for HIPAA Enforcement
- Resolution Agreement, Five enforcement actions hold healthcare providers accountable for HIPAA Right of AccessFive enforcement actions hold healthcare providers accountable for HIPAA Right of Access
- Resolution Agreement, Aetna Pays $1,000,000 to Settle Three HIPAA BreachesAetna Pays $1,000,000 to Settle Three HIPAA Breaches
- Resolution Agreement, Health Plan in Photocopier Breach CaseHHS Settles with Health Plan in Photocopier Breach Case
- Resolution Agreement, Advocate Health Care Settles Potential HIPAA Penalties for $5.55 MillionAdvocate Health Care Settles Potential HIPAA Penalties for $5.55 Million
- Resolution Agreement, Alaska DHSS Settles HIPAA Security Case for $1,700,000Alaska DHSS Settles HIPAA Security Case for $1,700,000
- Resolution Agreement, Allergy Practice pays $125,000 to settle doctor's disclosure of patient information to a reporterAllergy Practice pays $125,000 to settle doctor's disclosure of patient information to a reporter
- Resolution Agreement, Anthem pays OCR $16 Million in record HIPAA settlement following largest health data breach in historyAnthem pays OCR $16 Million in record HIPAA settlement following largest health data breach in history
- Resolution Agreement, Adult & Pediatric Dermatology, P.C. of MassachusettsResolution Agreement with Adult & Pediatric Dermatology, P.C. of Massachusetts
- Resolution Agreement, OCR Settles Seventeenth Investigation in HIPAA Right of Access InitiativeOCR Settles Seventeenth Investigation in HIPAA Right of Access Initiative
- Resolution Agreement, HIPAA RulesOrthopedic Clinic Pays $1.5 Million to Settle Systemic Noncompliance with HIPAA Rules
- Resolution Agreement, OCR Settles Fourteenth Investigation in HIPAA Right of Access InitiativeOCR Settles Fourteenth Investigation in HIPAA Right of Access Initiative
- Resolution Agreement, Arizona Hospital System Following Cybersecurity HackingHHS Office for Civil Rights Settles HIPAA Investigation with Arizona Hospital System Following Cybersecurity Hacking
- Resolution Agreement, OCR Settles First Case in HIPAA Right of Access InitiativeOCR Settles First Case in HIPAA Right of Access Initiative
- Resolution Agreement, BCBST for $1.5 millionHHS settles HIPAA case with BCBST for $1.5 million
- Resolution Agreement, OCR Settles Eleventh Investigation in HIPAA Right of Access InitiativeOCR Settles Eleventh Investigation in HIPAA Right of Access Initiative
- Resolution Agreement, Unauthorized Disclosure of Patients’ Protected Health Information During ABC Documentary Filming Results in Multiple HIPAA Settlements Totaling $999,000Unauthorized Disclosure of Patients’ Protected Health Information During ABC Documentary Filming Results in Multiple HIPAA Settlements Totaling $999,000
- Resolution Agreement, 750,000 HIPAA Settlement Emphasizes the Importance of Risk Analysis and Device and Media Control Policies750,000 HIPAA Settlement Emphasizes the Importance of Risk Analysis and Device and Media Control Policies
- Resolution Agreement, $2.5 million settlement shows that not understanding HIPAA requirements creates risk$2.5 million settlement shows that not understanding HIPAA requirements creates risk
- Resolution Agreement, Business Associate’s Failure to Safeguard Nursing Home Residents’ PHI Leads to $650,000 HIPAA SettlementBusiness Associate’s Failure to Safeguard Nursing Home Residents’ PHI Leads to $650,000 HIPAA Settlement
- Resolution Agreement, No Business Associate Agreement? $31K MistakeNo Business Associate Agreement? $31K Mistake
- Resolution Agreement, Lack of timely action risks security and costs moneyLack of timely action risks security and costs money
- Resolution Agreement, OCR Resolves Twentieth Investigation in HIPAA Right of Access Initiative with $80,000 SettlementOCR Resolves Twentieth Investigation in HIPAA Right of Access Initiative with $80,000 Settlement
- Resolution Agreement, HIPAA Business Associate Pays $2.3 Million to Settle Breach Affecting Protected Health Information of Over 6 million IndividualHIPAA Business Associate Pays $2.3 Million to Settle Breach Affecting Protected Health Information of Over 6 million Individual
- Civil Money Penalty, Cignet Health of Prince George's County, MDCivil Money Penalty issued to Cignet Health of Prince George's County, MD
- Resolution Agreement, Physical therapy provider settles violations that it impermissibly disclosed patient informationPhysical therapy provider settles violations that it impermissibly disclosed patient information
- Resolution Agreement, HIPAA Settlement Highlights the Continuing Importance of Secure Disposal of Paper Medical RecordsHIPAA Settlement Highlights the Continuing Importance of Secure Disposal of Paper Medical Records
- Resolution Agreement, Cottage Health Settles Potential Violations of HIPAA Rules for $3 MillionCottage Health Settles Potential Violations of HIPAA Rules for $3 Million
- Resolution Agreement, CVS Pharmacy, Inc.Resolution Agreement with CVS Pharmacy, Inc.
- Resolution Agreement, OCR Settles Nineteenth Investigation in HIPAA Right of Access InitiativeOCR Settles Nineteenth Investigation in HIPAA Right of Access Initiative
- Resolution Agreement, Read OCR's FAQs concerning HIPAA and the disposal of protected health informationRead OCR's FAQs concerning HIPAA and the disposal of protected health information
- Resolution Agreement, Doctors’ Management ServicesHHS’ Office for Civil Rights Settles Ransomware Cyber-Attack Investigation with Doctors’ Management Services
- Resolution Agreement, Dental Practice Pays $10,000 to Settle Social Media Disclosures of Patients’ Protected Health InformationDental Practice Pays $10,000 to Settle Social Media Disclosures of Patients’ Protected Health Information
- Resolution Agreement, OCR Settles Thirteenth Investigation in HIPAA Right of Access InitiativeOCR Settles Thirteenth Investigation in HIPAA Right of Access Initiative
- Resolution Agreement, Health Insurer Pays $5.1 Million to Settle Data Breach Affecting Over 9.3 Million PeopleHealth Insurer Pays $5.1 Million to Settle Data Breach Affecting Over 9.3 Million People
- Resolution Agreement, HHS Finalizes New Provisions to Enhance Integrated Care and Confidentiality for Patients with Substance Use ConditionsHHS Finalizes New Provisions to Enhance Integrated Care and Confidentiality for Patients with Substance Use Conditions
- Resolution Agreement, Improper disclosure of research participants’ protected health information results in $3.9 million HIPAA settlementImproper disclosure of research participants’ protected health information results in $3.9 million HIPAA settlement
- Resolution Agreement, Consequences for HIPAA violations don’t stop when a business closesConsequences for HIPAA violations don’t stop when a business closes
- Resolution Agreement, Five breaches add up to millions in settlement costs for entity that failed to heed HIPAA’s risk analysis and risk management rulesFive breaches add up to millions in settlement costs for entity that failed to heed HIPAA’s risk analysis and risk management rules
- Resolution Agreement, Green Ridge Behavioral Health, LLCGreen Ridge Behavioral Health, LLC Resolution Agreement and Corrective Action Plan
- Resolution Agreement, HHS Civil Rights Office Resolves HIPAA Right of Access Investigation with $20,000 SettlementHHS Civil Rights Office Resolves HIPAA Right of Access Investigation with $20,000 Settlement
- Resolution Agreement, Comstar, LLCHHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation with Comstar, LLC
- Civil Money Penalty, Warby ParkerHHS Office for Civil Rights Imposes a $1,500,000 Civil Money Penalty Against Warby Parker in HIPAA Cybersecurity Hacking Investigation
- Resolution Agreement, BST & Co. CPAs, LLPHHS’ Office for Civil Rights Settles HIPAA Ransomware Security Rule Investigation with BST & Co. CPAs, LLP
- Resolution Agreement, a Florida Health Care ProviderHHS Office for Civil Rights Settles HIPAA Security Rule Investigation with a Florida Health Care Provider
- Resolution Agreement, Vision Upright MRIHHS Office for Civil Rights Settles HIPAA Cybersecurity Investigation with Vision Upright MRI
- Civil Money Penalty, Oregon Health & Science UniversityHHS Office for Civil Rights Imposes a $200,000 Penalty Against Oregon Health & Science University for Failure to Provide Timely Access to Patient Records
- Resolution Agreement, HHS announces first HIPAA breach settlement involving less than 500 patientsHHS announces first HIPAA breach settlement involving less than 500 patients
- Resolution Agreement, iHealth Solutions Regarding Disclosure of Protected Health Information on an Unsecured Server for $75,000HHS Office for Civil Rights Settles HIPAA Investigation with iHealth Solutions Regarding Disclosure of Protected Health Information on an Unsecured Server for $75,000
- Resolution Agreement, HHS OCR Imposes a CMP on NJ Nursing Facility for Failing to Provide Timely Access to Patient RecordsHHS OCR Imposes a CMP on NJ Nursing Facility for Failing to Provide Timely Access to Patient Records
- Resolution Agreement, Idaho State University Settles HIPAA Security Case for $400,000Idaho State University Settles HIPAA Security Case for $400,000
- Civil Money Penalty, Jackson Health SystemOCR Imposes a $2.15 Million Civil Money Penalty against Jackson Health System for HIPAA Violations
- Resolution Agreement, Data Breach Results in $4.8 Million HIPAA SettlementsData Breach Results in $4.8 Million HIPAA Settlements
- Resolution Agreement, Eleven Enforcement Actions Uphold Patients’ Rights Under HIPAAEleven Enforcement Actions Uphold Patients’ Rights Under HIPAA
- Resolution Agreement, OCR Settles Second Case in HIPAA Right of Access InitiativeOCR Settles Second Case in HIPAA Right of Access Initiative
- Resolution Agreement, L.A. Care Health Plan Over Potential HIPAA Security Rule ViolationsHHS Office for Civil Rights Settles with L.A. Care Health Plan Over Potential HIPAA Security Rule Violations
- Resolution Agreement, Lafourche Medical Group, LLCLafourche Medical Group, LLC Resolution Agreement and Corrective Action Plan
- Resolution Agreement, HIPAA Settlement Reinforces Lessons for Users of Medical DevicesHIPAA Settlement Reinforces Lessons for Users of Medical Devices
- Resolution Agreement, Lab Pays $16,500 Settlement to HHS, Resolving Potential HIPAA Violation over Medical Records RequestLab Pays $16,500 Settlement to HHS, Resolving Potential HIPAA Violation over Medical Records Request
- Resolution Agreement, Lifespan Pays $1,040,000 to OCR to Settle Unencrypted Stolen Laptop BreachLifespan Pays $1,040,000 to OCR to Settle Unencrypted Stolen Laptop Breach
- Resolution Agreement, Administrative Law Judge rules in favor of OCR enforcement, requiring Lincare, Inc. to pay $239,800Administrative Law Judge rules in favor of OCR enforcement, requiring Lincare, Inc. to pay $239,800
- Resolution Agreement, HHS Office for Civil Rights Reaches Agreement with Health Care Provider in New Jersey That Disclosed Patient Information in Response to Negative Online ReviewsHHS Office for Civil Rights Reaches Agreement with Health Care Provider in New Jersey That Disclosed Patient Information in Response to Negative Online Reviews
- Resolution Agreement, Four HIPAA enforcement actions hold healthcare providers accountable with complianceFour HIPAA enforcement actions hold healthcare providers accountable with compliance
- Resolution Agreement, General Hospital Corp. & Massachusetts General Physicians Organization, Inc.Resolution Agreement with General Hospital Corp. & Massachusetts General Physicians Organization, Inc.
- Resolution Agreement, Overlooking risks leads to breach, $400,000 settlementOverlooking risks leads to breach, $400,000 settlement
- Civil Money Penalty, Texas cancer centerJudge rules in favor of OCR and requires a Texas cancer center to pay $4.3 million in penalties for HIPAA violations
- Resolution Agreement, Arkansas Business Associate MedEvolve Following Unlawful Disclosure of Protected Health Information on an Unsecured Server for $350,000HHS Office for Civil Rights Settles HIPAA Investigation with Arkansas Business Associate MedEvolve Following Unlawful Disclosure of Protected Health Information on an Unsecured Server for $350,000
- Resolution Agreement, Massachusetts Provider Settles HIPAA Case for $1.5 MillionMassachusetts Provider Settles HIPAA Case for $1.5 Million
- Resolution Agreement, $5.5 million HIPAA settlement shines light on the importance of audit controls$5.5 million HIPAA settlement shines light on the importance of audit controls
- Resolution Agreement, HHS Office for Civil Rights Enters Into $15,000 Settlement Resolving Potential HIPAA Violation Under the Right of Access InitiativeHHS Office for Civil Rights Enters Into $15,000 Settlement Resolving Potential HIPAA Violation Under the Right of Access Initiative
- Resolution Agreement, Small Health Care Provider Fails to Implement Multiple HIPAA Security Rule RequirementsSmall Health Care Provider Fails to Implement Multiple HIPAA Security Rule Requirements
- Resolution Agreement, Texas health system settles potential HIPAA violations for disclosing patient informationTexas health system settles potential HIPAA violations for disclosing patient information
- Resolution Agreement, Indiana Medical Records Service Pays $100,000 to Settle HIPAA BreachIndiana Medical Records Service Pays $100,000 to Settle HIPAA Breach
- Resolution Agreement, VoluntaryVoluntary Resolution Agreement Between The United States Department of Health and Human Services, Office for Civil Rights (“HHS”) and Montiefore
- Resolution Agreement, Management Services Organization Washington, Inc.Resolution Agreement with Management Services Organization Washington, Inc.
- Resolution Agreement, OCR Settles Case Concerning Improper Disposal of Protected Health InformationOCR Settles Case Concerning Improper Disposal of Protected Health Information
- Resolution Agreement, City Health Department failed to terminate former employee’s access to protected health informationCity Health Department failed to terminate former employee’s access to protected health information
- Resolution Agreement, Dental Practice Over Disclosures of Patients’ Protected Health InformationHHS Civil Rights Office Enters Settlement with Dental Practice Over Disclosures of Patients’ Protected Health Information
- Resolution Agreement, New York Presbyterian HospitalUnauthorized Filming for “NY Med” Results in $2.2 Million Settlement with New York Presbyterian Hospital
- Resolution Agreement, $1.55 million settlement underscores the importance of executing HIPAA business associate agreements$1.55 million settlement underscores the importance of executing HIPAA business associate agreements
- Resolution Agreement, OCR Settles Ninth Investigation in HIPAA Right of Access InitiativeOCR Settles Ninth Investigation in HIPAA Right of Access Initiative
- Resolution Agreement, Concentra Settlement AgreementConcentra Settlement Agreement
- Resolution Agreement, Health Fitness CorporationHHS’ Office for Civil Rights Settles HIPAA Security Rule Investigation with Health Fitness Corporation
- Resolution Agreement, a Behavioral Health ProviderHHS’ Office for Civil Rights Settles HIPAA Privacy and Security Rule Investigation with a Behavioral Health Provider
- Resolution Agreement, Neurology PracticeHHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation with Neurology Practice
- Resolution Agreement, Health Care Network for $600,000HHS Office for Civil Rights Settles Phishing Attack Breach with Health Care Network for $600,000
- Resolution Agreement, Syracuse ASCHHS’ Office for Civil Rights Settles HIPAA Ransomware Investigation with Syracuse ASC
- Resolution Agreement, Public HospitalHHS Office for Civil Rights Settles HIPAA Ransomware Cybersecurity Investigation with Public Hospital
- Resolution Agreement, Northeast RadiologyHHS Office for Civil Rights Settles HIPAA Security Rule Investigation with Northeast Radiology
- Resolution Agreement, MMG Fusion, LLCHHS’ Office for Civil Rights Settles HIPAA Investigation of MMG Fusion, LLC Breach
- Resolution Agreement, Cadia RehabilitationCadia Rehabilitation Resolution Agreement
- Resolution Agreement, Spencer Gifts LLCSpencer Gifts LLC Resolution Agreement
- Resolution Agreement, Top of the World Ranch Treatment Center, LLCTop of the World Ranch Treatment Center, LLC Resolution Agreement
- Resolution Agreement, Oregon Health & Science UniversityWidespread HIPAA vulnerabilities result in $2.7 million settlement with Oregon Health & Science University
- Resolution Agreement, HHS’ Office for Civil Rights Settles Optum Medical CareHHS’ Office for Civil Rights Settles Optum Medical Care
- Resolution Agreement, Oklahoma State University - Center for Health Services Pays $875,000 to Settle Hacking BreachOklahoma State University - Center for Health Services Pays $875,000 to Settle Hacking Breach
- Resolution Agreement, Colorado hospital failed to terminate former employee’s access to electronic protected health informationColorado hospital failed to terminate former employee’s access to electronic protected health information
- Resolution Agreement, Phoenix Cardiac Surgery for Lack of HIPAA SafeguardsHHS Settles Case with Phoenix Cardiac Surgery for Lack of HIPAA Safeguards
- Resolution Agreement, Clinical Laboratory Pays $25,000 to Settle Potential HIPAA Security Rule ViolationsClinical Laboratory Pays $25,000 to Settle Potential HIPAA Security Rule Violations
- Resolution Agreement, Phoenix HealthcareHHS’ OCR Settles HIPAA Investigation with Phoenix Healthcare