HIPAA-covered entities cannot disclose protected health information without authorization, and the lack of a business associate agreement left this information without safeguards, rendering it ...

HIPAA violations don’t always come from malicious attacks or headline-making data breaches. More often, they stem from everyday mistakes, like misdirected emails and vendors that aren’t as secure as ...

A North Carolina-based orthopedic and sports medicine clinic has agreed to settle potential HIPAA violation charges with a $750,000 payment for a 2013 data breach. Raleigh Orthopaedic Clinic reported ...

St. Elizabeth’s Medical Center in Brighton, Mass., has agreed to pay $218,400 to settle an alleged HIPAA violation and to adopt a corrective action plan for its HIPAA compliance program. In November ...

The U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) has announced a settlement with Guam Memorial Hospital Authority (GMHA), a public hospital on the U.S. Territory, ...