Skip to main content


U.S. flag
      An official website of the United States government
              Here’s how you know
        Here’s how you knowDot gov**Official websites use .gov**
                 A **.gov** website belongs to an official government organization in the United States.
                  HTTPS**Secure .gov websites use HTTPS**
                 A **lock** (A locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites. 
  Menu Close
          Enter the terms you wish to search for.
    Search
        








  
  
    

  
      

                                      About HHS
    
                        
                              
      
      
      Programs & Services
    
                        
                              
      
      
      Grants & Contracts
    
                        
                              
      
      
      Laws & Regulations                  
Health Information Privacy
  HIPAA for Individuals
    
                        
                                            
      
      
      Filing a Complaint
    
                        
                                            
      
      
      HIPAA for Professionals
    
                        
                                            
      
      
      Newsroom

              

    



Breadcrumb
    HHS
                              HIPAA Home
                              For Professionals
                              HIPAA Compliance and Enforcement
                              Case Examples
                              Case Examples Organized by Issue


    

    

    Navigate to:
  HIPAA for Professionals
    
                                    
                                            
            
      
      
      
      Regulatory Initiatives
    
                                                  
                                                                  
            
      
      
      
      Privacy
                                            
            
            Summary of the Privacy Rule
    
                                                  
                                            
            
      
      
      
      Guidance
    
                                                  
                                            
            
      
      
      
      Combined Text of All Rules
    
                                                  
                                            
            
      
      
      
      HIPAA Related Links
    
                                                  
                                                                  
            
      
      
      
      Security
                                            
            
            Summary of the Security Rule
    
                                                  
                                            
            
      
      
      
      Security Guidance
    
                                                  
                                            
            
      
      
      
      Cyber Security Guidance
    
                                                  
                                                                  
            
      
      
      
      Breach Notification
                                            
            
            Breach Reporting
    
                                                  
                                            
            
      
      
      
      Guidance
    
                                                  
                                            
            
      
      
      
      Reports to Congress
    
                                                  
                                            
            
      
      
      
      Regulation History
    
                                                  
                                                                  
            
      
      
      
      Compliance & Enforcement
                                            
            
            Enforcement Rule
    
                                                  
                                            
            
      
      
      
      Enforcement Process
    
                                                  
                                            
            
      
      
      
      Enforcement Data
    
                                                  
                                            
            
      
      
      
      Resolution Agreements
    
                                                  
                                            
            
      
      
      
      Case Examples
    
                                                  
                                            
            
      
      
      
      Audit
    
                                                  
                                            
            
      
      
      
      Reports to Congress
    
                                                  
                                            
            
      
      
      
      State Attorneys General
    
                                                  
                                                                  
            
      
      
      
      Special Topics
                                            
            
            HIPAA and Part 2
    
                                                  
                                            
            
      
      
      
      Change Healthcare Cybersecurity Incident FAQs
    
                                                  
                                            
            
      
      
      
      HIPAA and COVID-19
    
                                                                
                                                                  
            
      
      
      
      HIPAA and Reproductive Health
                          
            
            HIPAA and Final Rule Notice
    
                                                  
                                            
            
      
      
      
      HIPAA and Telehealth
    
                                                  
                                            
            
      
      
      
      HIPAA and FERPA
    
                                                  
                                            
            
      
      
      
      Research
    
                                                  
                                            
            
      
      
      
      Public Health
    
                                                  
                                            
            
      
      
      
      Emergency Response
    
                                                  
                                            
            
      
      
      
      Health Information Technology
    
                                                  
                                            
            
      
      
      
      Health Apps
    
                                                  
                                                                  
            
      
      
      
      Patient Safety
                                            
            
            Statute & Rule
                          
            
            PSQIA Statute
    
                                                  
                                            
            
      
      
      
      Patient Safety Rule
    
                                                  
                                            
            
      
      
      
      Enforcement
    
                                                  
                                            
            
      
      
      
      Guidance
    
                                                  
                                                                  
            
      
      
      
      Covered Entities & Business Associates
                                            
            
            Business Associate Contracts
    
                                                  
                                            
            
      
      
      
      Business Associates
    
                                    
                                            
            
      
      
      
      Training & Resources
    
                                    
                                            
            
      
      
      
      FAQs for Professionals
    
                                    
                                            
            
      
      
      
      Other Administrative Simplification RulesText resize icon

                    




Case Examples Organized by Issue








  
  
    

  
      



**Topics on this page:**

Access
	Authorizations
	Business Associates
	Conditioning Compliance with the Privacy Rule
	Confidential Communications
	Disclosures to Avert a Serious Threat to Health or Safety
	Impermissible Uses and Disclosures
	Minimum Necessary
	Notice
	Restrictions
	SafeguardsAccess

Private Practice Revises Process to Provide Access to Records
	Private Practice Revises Process to Provide Access to Records
	Private Practice Revises Access Policy
	Private Practice Revises Access Procedure
	Mental Health Center Provides Access after Denial
	Mental Health Center Provides Access and Revises Policies and ProceduresBack to Top

Authorizations

Large Provider Revises Process to Prevent Unauthorized Disclosures to Employers
	HMO Revises Process to Obtain Valid Authorizations
	Mental Health Center Provides Access after DenialBack to Top

Business Associates

Pharmacy Chain Enters into Business Associate AgreementBack to Top

Conditioning Compliance with the Privacy Rule

Private Practice Ceases Conditioning of Compliance with the Privacy RuleBack to Top

Confidential Communications

Hospital Implements New Policies for Telephone Messages
	Large Provider Revises Patient Contact ProcessBack to Top

Disclosures to Avert a Serious Threat to Health or Safety

Hospital Issues Guidelines Regarding Disclosures to Avert Threats to Health or SafetyBack to Top

Impermissible Uses and Disclosures

Pharmacy Chain Changes Process for Disclosures to Law Enforcement
	Large Medicaid Plan Corrects Vulnerability that Had Resulted in Wrongful Disclosure
	National Pharmacy Chain Extends Protections for Protected Health Information
	Health Plan Corrects Impermissible Disclosure of Protected Health Information
	Large Provider Revises Process to Prevent Unauthorized Disclosures to Employers
	Public Hospital Corrects Impermissible Disclosure of Protected Health Information in Response to a Subpoena
	Outpatient Surgical Facility Corrects Privacy Procedure in Research Recruitment
	Clinic Sanctions Supervisor for Accessing Employee Medical Record
	Large Provider Revises Patient Contact Process
	Large Health Care Provider Restricts Use of Patient Records
	Hospital Revises Email Distribution as a Result of an Impermissible Disclosure
	Private Practice Revises Policies and Procedures Addressing Activities Preparatory to ResearchBack to Top

Minimum Necessary

Hospital Implements New Policies for Telephone Messages
	Dentist Changes Process to Safeguard PHIBack to Top

Notice

Mental Health Center Corrects Process for Providing Notice of Privacy PracticesBack to Top

Restrictions

Mental Health Center Provides Access and Revises Policies and ProceduresBack to Top

Safeguards

Pharmacy Chain Institutes New Safeguards for Protected Health Information
	Large Medicaid Plan Corrects Vulnerability that Had Resulted in Wrongful Disclosure
	Health Plan Corrects Computer Flaw that Caused Mailing of EOBs to Wrong Persons
	National Pharmacy Chain Extends Protections for Protected Health InformationBack to Top

Case Examples

All Case Examples
	Case Examples by Covered Entity
	Case Examples by Issue

Resolution Agreements

Providence Health & Services

                    
  


Content created by Office for Civil Rights (OCR) Content last reviewed December 23, 2022Back to top
    Contact HHS
    
                        
                                            
      
      
      Careers
    
                        
                                            
      
      
      HHS FAQs
    
                        
                                            
      
      
      Nondiscrimination NoticeHHS Archive
    
                        
                                            
      
      
      Accessibility Statement
    
                        
                                            
      
      
      Privacy Policy
    
                        
                                            
      
      
      Viewers & PlayersBudget/Performance
    
                        
                                            
      
      
      Inspector General
    
                        
                                            
      
      
      Web Site Disclaimers
    
                        
                                            
      
      
      EEO/No Fear ActFOIA
    
                        
                                            
      
      
      The White House
    
                        
                                            
      
      
      USA.gov
    
                        
                                            
      
      
      Vulnerability Disclosure Policy
        Sign Up for Email Updates

Receive the latest updates from the Secretary, Blogs, and News Releases.

Sign Up
  HHS Headquarters
          200 Independence Avenue, S.W.
                  Washington, D.C. 20201
                  Toll Free Call Center: 1-877-696-6775​