In March of 2022, the US Health and Human Services Office of Civil Rights (HHS OCR) released four new enforcement actions. The Department took these actions against healthcare workers when they took place in medical practices that led to HIPAA violations. Half of the enforcement actions are from the HIPAA Right of Access Initiative, created by the HHS.
HIPAA Violations in Dental Settings
Three of the violations occurred in dental settings. First, a dentist in Pennsylvania did not provide a patient their medical records when requested. An administrative hearing occurred, leading to a settlement agreement. The dentist paid tens of thousands of dollars in damages and now has to ensure their practice aligns with HIPAA’s Privacy Rule.
Next, in Alabama, a dentist gave the information of nearly 4,000 patients to a political campaign manager. The dentist was running for political office and wanted the support of his patients. However, a year later, the same dentist gave away the information of over 5,000 patients. Once again, the dentist violated HIPAA for his own political gain. As a result, they required paid over $62,000 as a result of HIPAA Privacy violations.
Lastly, a dental practice responded to a negative online review from a patient by revealing their confidential information. Later, the HHS OCR received a complaint from the patient. Therefore, that dental practice was fined a $50,000 penalty.
Psychiatric HIPAA Violations
The fourth and final enforcement action from the HHS OCR was in response to violations a Californian psychiatrist. A patient tried on several occasions to get access to their medical records. Years later, the patient was finally given access to their own records after paying a fee. This practice goes against HIPAA’s Right of Access policy.
Get Certified
American Medical Compliance (AMC) is a leader in the industry for compliance, Billing and HR solutions. It is important for healthcare providers to understand all the HIPAA guidelines as it applies to them and their patients to avoid hefty fines. To become certified, please visit us at: www.americanmedicalcompliance.com.
Reference:
Policy & Medicine (2022, April 24). HHS OCR Announces Four Enforcement Actions for HIPAA Violations. Retrieved from: https://www.policymed.com/2022/05/hhs-ocr-announces-four-enforcement-actions-for-hipaa-violations.html
