10 Most Common HIPAA Violations

  1. Snooping on Healthcare Records

  2. Failure to Perform an Organization-Wide Risk Analysis

  3. Failure to Manage Security Risks / Lack of a Risk Management Process

  4. Denying Patients’ Access to Health Records/Exceeding Timescale for Providing Access

  5. Failure to Enter into Business Associate Agreement

  6. Insufficient ePHI Access Controls

  7. Failure to Use Encryption or an Equivalent Measure to Safeguard ePHI on Portable Devices

  8. Exceeding the 60-Day Deadline for Issuing Breach Notifications

  9. Impermissible Disclosures of Protected Health Information

  10. Improper Disposal of PHI

Did you find this article useful?