BC Advantage - 2019 Issue 6
Small Breaches Can Be Subject to Large Penalties
Subscribe or sign in to view the full article.
Article Overview
This article explains how a small physician practice became subject to an OCR settlement after an alleged privacy breach and uses that case to highlight HIPAA Privacy and Security compliance expectations. It is intended for practice managers, compliance staff, privacy officers, and clinicians who need a broad understanding of how privacy incidents can trigger enforcement and what organizational controls are generally emphasized.
Why This Topic Matters
It shows that HIPAA privacy enforcement is not limited to large organizations and that even small practices can face significant financial and operational consequences from breaches.
Article Sections
-
Enforcement action involving a small practice
Introduces the OCR matter involving a small physician practice and summarizes the type of privacy incident described in the article.
-
Compliance expectations for physician practices
Discusses general privacy compliance responsibilities, organizational safeguards, and the role of internal policies and training.
-
Corrective action and monitoring
Describes the broader compliance follow-up associated with the enforcement action and the oversight burden placed on the practice.
-
How investigations may begin
Explains that privacy investigations can be initiated from multiple sources of public information, not only patient complaints.
What You Will Learn
- How OCR privacy enforcement can affect small physician practices
- The types of organizational safeguards commonly emphasized in HIPAA compliance
- Why internal privacy policies and training matter in practice operations
- How privacy investigations may be triggered by publicly available information
Who Should Read This
- Physician practices
- Practice managers
- Compliance officers
- Privacy officers
- Health information management professionals
- Clinicians
Subscribe or sign in to view the full article.
Quick, Current, Complete - www.findacode.com