Enforcement cases by entity
This is a list of examples of OCR's HIPAA enforcement actions organized by covered entity type. The target audience is health care professionals.
Final
Issued by: Office for Civil Rights (OCR)
Issue Date: July 09, 1905
Case Examples Organized by Covered Entity
Topics on this page:
- General Hospitals
- Health Care Providers
- Health Plans / HMOs
- Outpatient Facilities
- Pharmacies
- Private Practices
- Mental Health Centers
General Hospitals
-
Hospital Issues Guidelines Regarding Disclosures to Avert Threats to Health or Safety
-
Large Provider Revises Process to Prevent Unauthorized Disclosures to Employers
- Hospital Revises Email Distribution as a Result of an Impermissible Disclosure
Health Care Providers
Health Plans / HMOs
-
Large Medicaid Plan Corrects Vulnerability that Had Resulted in Wrongful Disclosure
-
Health Plan Corrects Computer Flaw that Caused Mailing of EOBs to Wrong Persons
-
Health Plan Corrects Impermissible Disclosure of Protected Health Information
Outpatient Facilities
-
Mental Health Center Corrects Process for Providing Notice of Privacy Practices
-
Outpatient Surgical Facility Corrects Privacy Procedure in Research Recruitment
-
Clinic Sanctions Supervisor for Accessing Employee Medical Record
Pharmacies
-
Pharmacy Chain Institutes New Safeguards for Protected Health Information
-
Pharmacy Chain Changes Process for Disclosures to Law Enforcement
-
National Pharmacy Chain Extends Protections for Protected Health Information
Private Practices
-
Private Practice Revises Process to Provide Access to Records
-
Private Practice Revises Process to Provide Access to Records
-
Private Practice Ceases Conditioning of Compliance with the Privacy Rule
- Private Practice Revises Policies and Procedures Addressing Activities Preparatory to Research
Mental Health Centers
HHS is committed to making its websites and documents accessible to the widest possible audience, including individuals with disabilities. We are in the process of retroactively making some documents accessible. If you need assistance accessing an accessible version of this document, please reach out to the guidance@hhs.gov.
DISCLAIMER: The contents of this database lack the force and effect of law, except as authorized by law (including Medicare Advantage Rate Announcements and Advance Notices) or as specifically incorporated into a contract. The Department may not cite, use, or rely on any guidance that is not posted on the guidance repository, except to establish historical facts.