Between 2005 and 2009, the HHS alleged that UCLA employees improperly accessed the medical records of multiple patients, that UCLA did not have adequate training in place, and did not have sufficient security measures in place. The HHS investigation began after complaints from two celebrity patients. As part of its settlement, UCLA agreed to pay $865,500.

TIP:   Make sure your organization has clear measures in place to ensure compliance with HIPAA.