CoreFolio Learn
What the Office for Civil Rights (OCR) is actually investigating right now, and how small practices end up on the wrong end of a settlement.
7 articles in this topic
Business associates are directly liable under HIPAA, and OCR fines them directly. Every verified OCR business associate settlement, from 2016 to 2026.
10-minute read
The 2026 HIPAA penalty tiers from the Federal Register, plus evidence that strong security practices can reduce what Office for Civil Rights (OCR) imposes.
9-minute read
Office for Civil Rights (OCR) investigations open with a document request. Practices with organized records fare far better. What they ask for and how to have it ready in advance.
8-minute read
Office for Civil Rights (OCR) investigates practices through three channels: patient complaints, breach reports, and enforcement initiatives. How each works and how to lower your risk.
8-minute read
The OCR Risk Analysis Initiative targets small practices after breaches, ransomware, and complaints. What changed in 2024 and what a defensible answer needs.
17-minute read
OCR has settled with dozens of practices over risk analysis failures. Their letters and resolution agreements show exactly what a risk analysis must cover.
6-minute read
More than 100 OCR resolution agreements follow one pattern. The six violations investigators cite again and again, and what each means for your practice.
6-minute read