News & Analysis as of

Medical Records Office of Civil Rights

Warner Norcross + Judd

OCR Enforcement Intensifies: Key Takeaways on Risk Analysis and Right of Access

Warner Norcross + Judd on

The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services has renewed its focus on two critical areas of HIPAA compliance: risk analysis and individual right of access. These enforcement...more

Saul Ewing LLP

OCR Imposes $200,000 Civil Money Penalty Against HIPAA-Covered Entity

Saul Ewing LLP on

On March 6, 2025, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced a civil money penalty (“CMP”) of $200,000 against Oregon Health & Science University (“OHSU”) for failing to...more

Shook, Hardy & Bacon L.L.P.

OCR Enforcement Activity: Trends and Insights From a Limited Sample

Arecent report put the odds of an asteroid hitting the earth in December 2032 at 3.1%—which is 3,100 times more likely than an organization resolving an enforcement action with the U.S. Department of Health and Human...more

Jackson Lewis P.C.

Patient’s Request for Records Uncovers Dental Practice’s Ransomware Attack, Leading to $350K Settlement

Jackson Lewis P.C. on

The Indiana Attorney General Office (OAG) filed a detailed complaint on December 23, 2024 (Complaint) which arose out of the following patient complaint: The OAG received a consumer complaint stating that the consumer had...more

Baker Donelson

Texas Court Issues Injunction on 2024 HIPAA Reproductive Privacy Rule

Baker Donelson on

The HIPAA Privacy Rule to Support Reproductive Health Care Privacy went into effect on June 24, 2024. The 2024 Final Rule strengthens privacy protections for medical records and other health information related to...more

Health Care Compliance Association (HCCA)

Disclosure of Full Record to Employer Results in $35K Fine, Broad CAP; Echoes of 2017 HIV Case

It’s not immediately obvious why someone would want to disclose a health care test result as part of a job application. But one such request spurred a Pennsylvania entity to provide a lot more than that: it sent her whole...more

King & Spalding

HIPAA Reproductive Healthcare Privacy – Recent Settlement Related to Privacy Rule Violation and Reminder of December 2024 Privacy...

King & Spalding on

Last week, HHS Office of Civil Rights (OCR) announced a settlement with a Pennsylvania provider (the Provider) concerning an alleged violation of the HIPAA Privacy Rule. Specifically, the Provider impermissibly disclosed a...more

Health Care Compliance Association (HCCA)

Privacy Briefs: November 2024

Change Healthcare Inc. has amended its initial breach report to the HHS Office for Civil Rights (OCR) to state that 100 million individuals were impacted by its mammoth ransomware attack and breach. However, as of Oct. 24,...more

Williams Mullen

Will 50 Enforcement Actions Be Sufficiently “Loud and Clear” that HIPAA’s Right of Access Must Be Honored?

Williams Mullen on

Because of pervasive misunderstanding of the Health Insurance Portability and Accountability Act (HIPAA), providers all too frequently create impermissible barriers to patient access to medical records. In many cases, such...more

Saul Ewing LLP

A “Scary” OCR CMP Imposed Upon a Solo Dental Practice

Saul Ewing LLP on

On October 21, 2024, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced a civil monetary penalty (“CMP”) of $70,000 against a solo dental practice that provides family dental...more

Saul Ewing LLP

OCR Imposes $115,200 CMP Against HIPAA-Covered Entity

Saul Ewing LLP on

On August 1, 2024, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced a civil monetary penalty of $115,200 against American Medical Response (“AMR”) based on a complaint that...more

Arnall Golden Gregory LLP

OCR Announces Latest in Right of Access Enforcement Actions With Imposition of Civil Monetary Penalty

On August 1, 2024, the U.S. Department of Health and Human Services, Office for Civil Rights (“OCR”) announced the imposition of a civil monetary penalty (“CMP”) of $115,200 collected against American Medical Response...more

Health Care Compliance Association (HCCA)

Privacy Briefs: May 2024

Kaiser Permanente is notifying 13.4 million current and former members that their personal information may have been compromised when it was transmitted to tech giants Google, Microsoft Bing and X (formerly Twitter) when...more

Robinson+Cole Data Privacy + Security Insider

OCR Issues Final Rule for Reproductive Privacy

The Office for Civil Rights (OCR) of the Department of Health and Human Services (HHS) recently issued its Final Rule to modify HIPAA “to support reproductive health care privacy.” The Final Rule is in response to Executive...more

Saul Ewing LLP

Make Sure Mom's Records Are Timely Provided; Two New HIPAA-Covered Entity Payments Announced

Saul Ewing LLP on

​The U.S. Department of Health and Human Services ("HHS"), Office for Civil Rights ("OCR") continues to be actively engaged in investigating and settling alleged HIPAA violations. In advance of Mother's Day, two decisions...more

Epstein Becker & Green

2024 Update: Regulators Use “Carrots and Sticks” to Incentivize Healthcare Sector Cybersecurity Compliance

Epstein Becker & Green on

Healthcare organizations continue to be prime targets of cyberattacks. It is well-established that cyberattacks can lead to financial loss, reputational damage, and, in some cases, risks to patient care and safety. The recent...more

Health Care Compliance Association (HCCA)

In This Month’s E-News: March 2024

The Association of American Universities (AAU) and the Council on Governmental Relations (COGR) are among a handful of groups “urging the Biden administration to rescind a policy proposal that would threaten the American...more

Health Care Compliance Association (HCCA)

News Briefs: January 8, 2024

H. Lee Moffitt Cancer Center & Research Institute Hospital Inc. in Tampa, Florida, has agreed to pay $19.564 million to settle false claims allegations over claims submitted to federal health care programs for items and...more

Orrick, Herrington & Sutcliffe LLP

Confidentiality of Substance Use Disorder Patient Records: What to Know About Updates to Part 2

The U.S. Department of Health & Human Services (HHS), through the Substance Abuse and Mental Health Services Administration (SAMHSA) and the Office for Civil Rights (OCR), has announced a final rule (the Rule) updating the...more

Williams Mullen

42 CFR Part 2 Final Rule Harmonizes Substance Use Disorder Confidentiality Protections with HIPAA

Williams Mullen on

On February 8, 2024, the federal Confidentiality of Substance Use Disorder (SUD) Patient Records regulations at 42 CFR Part 2 (Part 2) were revised in part to increase patient protection and streamline patient consent...more

Polsinelli

HHS Finalized Part 2 Revisions: What Has Changed?

Polsinelli on

On February 8, 2024, the U.S. Department of Health and Human Services, through its Office for Civil Rights (OCR) and the Substance Abuse and Mental Health Services Administration (SAMHSA), released final rule (Final Rule)...more

Arnall Golden Gregory LLP

OCR Announces 46th Right of Access Settlement

The U.S. Department of Health and Human Services, Office for Civil Rights (“OCR”) recently announced its 46th settlement under its Right of Access Initiative since it was initially launched in 2019. Allegations in the recent...more

Health Care Compliance Association (HCCA)

OCR: UHC Admitted Worker ‘Error’ Left Records Request Languishing in the Mail, Pays $80,000

Start with a records request. Add a seven months’ wait. Stir in the chaos of the pandemic, with most employees working from home. Blend in a perhaps-neglected post office box. Bake for two-and-a-half years....more

Saul Ewing LLP

National Payor Agrees to Pay $80,000 to Settle HIPAA Right of Access Investigation

Saul Ewing LLP on

In late August, the HHS Office for Civil Rights ("OCR") announced an $80,000 settlement with United Healthcare Insurance Company ("United") relating to OCR's right of access initiative (the "Initiative") which requires that...more

Jackson Lewis P.C.

$240,000 HIPAA Settlement With OCR Due to Snooping Security Guards

Jackson Lewis P.C. on

It is not the first time we have written about complaints, OCR settlements, and even jail time following snooping by hospital employees into patient records. For example, as COVID raged, an investigation showed that for...more

159 Results
 / 
View per page
Page: of 7

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide