Enforcement intelligence

HIPAA Enforcement Actions

Review source-backed HIPAA enforcement outcomes and the operational lessons they provide.

Reviewed August 2026

Published records

OCR enforcement highlights show how HIPAA complaints and cases are resolved

OCR publishes aggregate enforcement information and examples of corrective action, resolution agreements, and civil money penalties.

Classification: enforcement · Published November 21, 2024 · Source: HHS Office for Civil Rights

Read the HHS Office for Civil Rights source

Topics: Enforcement Rule, corrective action, resolution agreements, civil money penalties

OCR settlement links phishing response to HIPAA risk management

An April 23, 2025 OCR settlement followed an investigation of a phishing attack breach and includes a corrective action plan.

Classification: enforcement · Published April 23, 2025 · Source: HHS Office for Civil Rights

Read the HHS Office for Civil Rights source

Topics: risk analysis, risk management, phishing, incident response

How to use this index

Each record separates the classification, published date, affected audience, and source-backed explanation. Confirm the linked primary source before using an item to guide a legal, privacy, security, or incident-response decision.

Explore related intelligence

HIPAA Regulatory Updates — Track verified HIPAA proposals, final rules, guidance, and legal-status changes from authoritative sources.
HIPAA Breach Lessons — Learn from authoritative HIPAA breach reporting guidance and source-backed incident lessons.

Browse the complete HIPAA knowledge hub or read the editorial sourcing standard.