Case Examples

These examples show how covered entities can effectively comply with the requirements of the Privacy Rule. Periodically, we update this page with case examples of the corrective actions that OCR obtains from covered entities through our enforcement efforts.

Case Examples Organized by Covered Entity		Case Examples Organized by Issue
General Hospitals Health Care Providers Health Plans / HMOs Outpatient Facilities Pharmacies Private Practices		Access Authorizations Business Associates Confidential Communications Disclosures to Avert a Serious Threat to Health or Safety Impermissible Uses and Disclosures Minimum Necessary Notice Safeguards

Resolution Agreements

Learn about the Resolution Agreement with Providence Health and Services