
OCR Enforcement of SUD Privacy Rules Begins February 16, 2026
Are you ready for the HIPAA 42 CFR Part 2 updates? Health organizations who treat substance abuse disorders must fully comply by February 16, 2026.

Are you ready for the HIPAA 42 CFR Part 2 updates? Health organizations who treat substance abuse disorders must fully comply by February 16, 2026.

The HHS OCR has released new and updated guidance on specific parts of the HIPAA Privacy Rule in the form of frequently asked questions.

The OCR’s investigation determined that Health Fitness violated the HIPAA Security Rule’s Risk Analysis provision protecting ePHI.

The OCR announced its first financial penalty of 2025 for HIPAA violations regarding the ePHI of nearly 200,000 individuals.

Providence Medical fined $240K for HIPAA violations after a ransomware attack. Learn key steps to protect patient data and avoid breaches.

AMR paid a civil monetary penalty of $115,200 to the OCR for failing to provide a patient with timely access to her medical records.

The OCR/HHS issued resources to help patients understand the privacy and security risks when using telehealth services and how to reduce the risks.

Find out what the Office for Civil Rights in HSS has said about data security, patient privacy, and how healthcare providers should respond.

Itʼs important to familiarize yourself with how the Supreme Court Ruling affects patient privacy and PHI and reading through the OCRʼs new guidance is a good step.

Every hour of every day an average of two HIPAA complaints come into the Department of Health and Human Services’ Office for Civil Rights (OCR). Let us help you stay in compliance and stay off the OCR’s complaint list.
Don’t miss the latest updates, tips, and best practices in privacy and security compliance! Join our email newsletter for:
Sign up now and elevate your compliance game!