HIPAAmart

Enforcement action · enforcement

OCR enforcement highlights show how HIPAA complaints and cases are resolved

OCR publishes aggregate enforcement information and examples of corrective action, resolution agreements, and civil money penalties.

· Last verified August 29, 2026

Record details

Classification
enforcement
Published date
November 21, 2024
Source
HHS Office for Civil Rights

What this record says

The enforcement highlights page is an authoritative starting point for understanding OCR's enforcement program. Published outcomes can reveal recurring operational weaknesses, but an enforcement result is not a new generally applicable rule. Read the underlying resolution agreement, corrective action plan, or decision before drawing a lesson from a case.

Who should review this

  • Covered entities
  • Business associates
  • Compliance and legal teams

Core concepts

  • Enforcement Rule
  • corrective action
  • resolution agreements
  • civil money penalties

References

Back to Enforcement actions · Browse the HIPAA knowledge hub · Read the editorial sourcing standard