NEW: A Better Approach to HIPAA Training
View HIPAA Courses
NEW: A Better Approach to HIPAA Training
View HIPAA Courses

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

Legal News about HIPAA Compliance

The HIPAA Journal legal news section contains details of the latest enforcement activities by the Department of Health and Human Services’ Office for Civil Rights, including settlements and civil monetary penalties, and legal actions taken against covered entities by state attorneys general.

You will also find brief details of class action lawsuits and other legal actions filed against covered entities for HIPAA violations, privacy violations, and data breaches, along with other legal news specifically relating to HIPAA or other legal matters of particular relevance to the healthcare industry.

Changes to HIPAA Rules are detailed in the HIPAA Updates category, although this section does include updates to state legislation, in particular any changes to breach notification and cybersecurity laws that are relevant to healthcare organizations.

Vasindas’ Around the Clock Care Settles Data Breach Litigation

Vasindas’ Around the Clock Care data breach settlement

Vasindas’ Around the Clock Care, Inc., a California-based provider of home care services, has settled class action litigation over a...

Albany College of Pharmacy and Health Sciences Data Breach Settlement

Albany College of Pharmacy and Health Sciences data breach settlement

Albany College of Pharmacy and Health Sciences in New York State has agreed to settle a class action lawsuit stemming...

Settlement Resolves Class Action Data Breach Complaint Against Community Dental Care

Against Community Dental Care data breach settlement

Community Dental Care, a nonprofit Medicaid dental provider in the state of Minnesota, has agreed to settle class action litigation...

Modernizing Medicine Agrees to $3M Data Breach Settlement

Modernizing Medicine data breach settlement

Modernizing Medicine, a Boca Raton, Florida-based company that provides cloud-based, AI-powered software and electronic health record systems for healthcare providers,...

Brevard Skin and Cancer Center Settles Class Action Complaint

Brevard Skin and Cancer Center data breach settlement

The Florida dermatology practice, Brevard Skin and Cancer Center, has agreed to a settlement to resolve class action litigation stemming...

Central Maine Medical Center & Susan B. Allen Memorial Hospital Settle Data Breach Lawsuits

Central Maine Medical Center & Susan B. Allen Memorial Hospital data breach settlements

Central Maine Medical Center & Susan B. Allen Memorial Hospital have agreed to settle class action lawsuits stemming from data...

News Categories

Notices

Medical Groups Settle Class Action Data Breach Lawsuits

Palomar health medical group & summit health medical group data breach settlements

Settlements have been reached to resolve class action data breach lawsuits against Palomar Health Medical Group in California and Summit...

Wellstar Health System & Cone Health Settle Pixel Lawsuits

Wellstar Health & Cone Health Pixel Lawsuit settlements

Settlements have been agreed to resolve class action lawsuits against Wellstar Health System and Moses H. Cone Memorial Hospital Operating...

OneTouchPoint Agrees to Multi-Million Dollar Data Breach Settlement

OneTouchPoint data breach settlement

The Wisconsin mailing and printing vendor OneTouchPoint Corp. has agreed to settle class action litigation over a 2022 ransomware attack...

Multi-Million Settlement Resolves Managed Care of North America Data Breach Litigation

Managed Care of North America data breach settlement

Managed Care of North America, Inc. (MCNA) has agreed to settle class action litigation stemming from a 2023 cybersecurity incident...

Highland Oncology Group Settles Litigation Stemming From 2025 Ransomware Attack

Highlands Oncology Group data breach settlement

Highlands Oncology Group, an Arkansas-based physician-owned community cancer care and research practice serving Northwest Arkansas, Southwest Missouri, and Southeast Oklahoma,...

DaVita Agrees to Pay $15 Million to Settle Data Breach Litigation

In 2025, the kidney dialysis giant DaVita experienced a ransomware attack that involved the theft of sensitive patient data. Some...

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist