A rehab facility posted a patient's recovery photo and story online to celebrate them. They had not agreed to it. Neither had the 149 patients before them. The bill arrived from the federal government.
He had just been told he was losing his job. Over the next three weeks he opened patient charts 323 times — celebrities, colleagues, his own supervisor. He became the first person in America to go to prison for it.
A mother asked a hospital for her unborn child's medical records and waited the better part of a year. The federal settlement that followed launched an enforcement wave aimed squarely at small practices.
HHS has proposed the biggest update to the HIPAA Security Rule in over a decade. Here's what's changing, why it matters, and how to get ahead of it before it lands.