The Office for Civil Rights (OCR) announced a settlement with a Pennsylvania-based health care provider offering dental services for potential violations of the HIPAA Privacy Rule. The provider has agreed to pay $140,000 in the settlement, which resolves an OCR investigation of a complaint alleging a failure to provide timely access to an individual’s protected health information. hhs.gov/press-room/hhs-offic…

@HHSOCR settles HIPAA Security Rule investigation with Ambry Genetics after a 2020 phishing attack exposed the protected health information of 225,370 people. Ambry will pay $700K and follow a 2-year corrective action plan. Read more here: hhs.gov/press-room/hhs-offic… #HIPAA #HealthCarePrivacy #Cybersecurity #HIPAACompliance

No student should have to choose between their faith and their education. @HHSOCR and @TheJusticeDept secured a settlement ending discrimination against Jewish students at Lincoln Memorial University's DeBusk College of Osteopathic Medicine. Read the full press release: hhs.gov/press-room/hhs-ocr-a… #CivilRights #TitleVI #Section1557

@HHSOCR's investigation finds Duke School of Medicine used race and race-proxies in admissions, violating Title VI and Section 1557. The investigation is part of the Administration's government-wide effort to end illegal DEI practices in federally funded programs. Read the press release and findings here: hhs.gov/press-room/hhs-ocr-d…

The University of Pittsburgh Medical Center Williamsport, an acute care hospital, has agreed to a series of reforms to ensure effective communication with patients with disabilities after not providing a sign language interpreter for a deaf patient in its emergency department. The complaint was investigated under Section 504 of the Rehabilitation Act and Section 1557 of the Patient Protection and Affordable Care Act. Read more about the agreement here: hhs.gov/press-room/hhs-ocr-a…

Today OCR announced it is issuing guidance on federal civil rights laws to protect against discrimination rooted in antisemitism. This guidance will serve as a central reference document about legal rights and responsibilities and examples of OCR’s enforcement actions to combat antisemitism. Our letter advances Executive Order 14188, which declares “the policy of the United States to combat anti-Semitism vigorously.” Read our press release: hhs.gov/press-room/hhs-ocr-i…

We hope to see you tomorrow at the “Safeguarding Health Information: Building Assurance Through HIPAA Security 2026 Conference,” hosted by @HHSOCR and @NIST. You can still register to participate virtually here: nist.gov/news-events/events/… #HIPAA #HealthCarePrivacy #Cybersecurity #HIPAACompliance

Registration for in-person attendance has officially closed for the “Safeguarding Health Information: Building Assurance Through HIPAA Security 2026 Conference,” hosted by @HHSOCR and @NIST. However, you can still reserve your virtual seat here: nist.gov/news-events/events/… #HHS #HIPAA #HealthCarePrivacy #Cybersecurity #HIPAACompliance

30 years ago this month, Congress laid the foundation for protecting the privacy & security of your health information. Watch OCR Director Paula Stannard reflect on three decades of HIPAA and what's ahead for the landmark law: youtu.be/7qBbsd2y4_Y #HIPAA #Cybersecurity

HHS OCR is initiating compliance reviews of 5 medical schools for potential Title VI & Section 1557 violations.  These reviews are part of OCR’s Merit-Based Opportunity Enforcement Initiative, launched to root out unlawful race-based discrimination in HHS-funded programs, the health care workforce pipeline, and health care facilities. Federal antidiscrimination laws apply to programs or initiatives that may involve discriminatory practices, including those labeled as Diversity, Equity, and Inclusion ("DEI") programs.  Entities that receive HHS  funds must ensure that their programs and activities comply with federal law and do not discriminate on the basis of race, color, national origin, disability, age, sex, religion, or other protected characteristics – no matter the program’s labels, objectives, or intentions. No program, DEI or otherwise, is above the law. Read the press release at hhs.gov/press-room/hhs-offic….

Access granted! You have a right to your health records. @HHSOCR announces its 55th Right of Access enforcement action, settling with a California healthcare provider for $50,000 after a patient waited nearly 2 years for access to her medical records. Read the press release at akaprod-www.hhs.gov/press-ro…. #HIPAA #HealthCarePrivacy #Cybersecurity #HIPAACompliance #RightToAccess

Happy Birthday HIPAA! On this day, 30 years ago, HIPAA began as a law to help Americans keep health coverage when switching jobs and to enable the health care system to run more efficiently. Part of the law evolved into the rules that protect the privacy and security of health information and gave individuals rights to that information. Today, OCR administers and enforces those rights and protections through investigations, rulemaking, guidance, and outreach. #HIPAA #HealthCarePrivacy #Cybersecurity #HIPAACompliance

The American people understand the importance of conscience rights. HHS is sending a clear message: we will protect religious liberty without apology, enforce civil rights without heed to ideology, and safeguard health information with discipline. Read our op-ed in the Washington Reporter at washingtonreporter.news/op-e….