Search

On March 6, 2025, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced a civil money penalty (“CMP”) of $200,000 against Oregon Health & Science University (“OHSU”) for failing to provide a patient’s personal representative with timely access to medical...

On February 20, 2025, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced a $1.5 million civil money penalty (CMP) against Warby Parker, Inc. (WP). WP is a manufacturer and online retailer of prescription and non-prescription eyewear. The CMP was finalized...

Medical practices, dental practices and other health care entities must again comply with the federal Corporate Transparency Act (“CTA”). The deadline for compliance is March 21, 2025. What You Need to Know: The Corporate Transparency Act filing deadline is now March 21, 2025. Medical practices and...

On November 1, 2024, the U.S. Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”) announced a $90,000 settlement with Bryan County Ambulance Authority (“BCAA”), a provider of emergency medical services in Oklahoma, concerning potential violations of the Health Insurance...

On October 21, 2024, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced a civil monetary penalty (“CMP”) of $70,000 against a solo dental practice that provides family dental care, Gums Dental Care, LLC (“GDC”), based on a complaint that GDC failed to...

In October 2024, the U.S. Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”) announced the imposition of a civil monetary payment against Providence Medical Institute (“PMI”), a large medical practice based in Southern California with 275 providers who work in 35...

In late September 2024, the U.S. Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”) announced a settlement with Cascade Eye and Skin Centers, P.C., a health care provider in the state of Washington (“CESC”), concerning potential violations of the Health Insurance...

On August 1, 2024, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced a civil monetary penalty of $115,200 against American Medical Response (“AMR”) based on a complaint that AMR failed to provide a patient with timely access to their medical records...

On July 1, 2024, the U.S. Department of Health and Human Services (“HHS”) Office For Civil Rights (“OCR”) announced a $950,000 settlement with Heritage Valley Health System (“Heritage Valley”) and a three-year Corrective Action Plan (“CAP”). What You Need to Know: HIPAA Security Rule (and Privacy...

On April 22, 2024, the U.S. Department of Health & Human Services (“HHS”) Office for Civil Rights (“OCR”) announced a final rule to support reproductive health care privacy (the “Reproductive Rule”). According to the HHS OCR press release, the Reproductive Rule, “is one of many actions taken by HHS...

​The U.S. Department of Health and Human Services ("HHS"), Office for Civil Rights ("OCR") continues to be actively engaged in investigating and settling alleged HIPAA violations. In advance of Mother's Day, two decisions were announced for HIPAA-covered entities that allegedly did not provide...

On February 14, 2024, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) issued two reports to Congress as required by the Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009. The reports are helpful to health care providers (and all...

On February 16, 2024, the HHS Office for Civil Rights (OCR) and the National Institute of Standards and Technology (NIST) published a final version of the cybersecurity resource guide (the “Guide”) with respect to the HIPAA Security Rule. As noted in the Guide’s abstract, “This publication provides...

On February 6, 2024, the HHS Office for Civil Rights (“OCR”) announced a settlement with Montefiore Medical Center (“MMC”) for alleged HIPAA Security Rule violations and MMC agreed to pay $4.75 million and enter into a two-year corrective action plan (“CAP”) with OCR. MMC admitted no wrongdoing...

In December 2023, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced a $480,000 settlement with a Louisiana medical group following a phishing incident. In 2021, the medical group filed a breach report with HHS stating that a hacker – through a...

Saul Ewing LLP's Consumer Financial Services Litigation Practice recently hosted their annual half-day CLE program on Thursday, December 14. This program provided updates on consumer financial services litigation and enforcement trends, including federal and state governments' top consumer...

On November 20, 2023, the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) announced an $80,000 HIPAA settlement with Saint Joseph’s Medical Center (“SJMC”) in New York State. The settlement was the result of OCR’s investigation of SJMC after the Associated Press...