The Joint Commission

OCR Publishes New and Updated HIPAA Privacy Rule Guidance

12/04/2025

The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has published new and updated guidance on certain aspects of the HIPAA Privacy Rule, adding a new FAQ on permitted disclosures of PHI to value-based care […]

Washington Children’s Hospital Fires 15 Nurses for Alleged HIPAA Violations

12/04/2025

Fifteen nurses at Providence Sacred Heart Medical Center & Children’s Hospital in Spokane, Washington, have been terminated for alleged HIPAA violations. The nurses allegedly accessed the medical records of a 12-year-old patient, Sarah June Niyimbona, who committed suicide at the […]

Crisis Pregnancy Centers’ Websites Edited After Scrutiny of HIPAA Claims

12/04/2025

Back in February, The HIPAA Journal reported on the efforts of the non-profit watchdog organizations the Campaign for Accountability and the Electronic Frontier Foundation (EFF) to prevent crisis pregnancy centers (CPCs) from claiming or implying they are bound by the […]

What are the Penalties for HIPAA Violations?

12/04/2025

The penalties for HIPAA violations include civil monetary penalties ranging from $141 to $2,134,831 per violation, depending on the level of culpability. Criminal penalties can also be imposed for intentional HIPAA violations, leading to fines and potential imprisonment. In addition […]

Healthplex Settles Alleged Cybersecurity Failures with NYDFS for $2 Million

12/04/2025

Healthplex, one of the largest providers of dental health insurance programs in New York State, has agreed to a settlement with the New York Department of Financial Services (NYDFS) to resolve alleged violations of the NYDFS Cybersecurity Regulation (23 NYCRR […]