PrivacySignal
Healthcare

Shen Smiles Pays $140,000 to Resolve HIPAA Privacy Rule Violations

HIPAA Journal · · US Federal · Healthcare Privacy

A Pennsylvania dental practice, Shen Smiles, has agreed to pay $140,000 to settle HIPAA Privacy Rule violations. The agreement involves the practice's owner and operator, Dr. Linda L. Shen.

Why this matters: Dental offices collect a lot — health history, insurance details, treatment records. Patients hand that over because they have to, not because they trust a billing system. When a small practice violates HIPAA, the fine rarely makes headlines, but the exposure is just as real as at a large hospital. A $140,000 settlement is a meaningful number for a solo practice. It signals that regulators are watching small providers, not just big health systems.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Healthcare
HIPAA Journal · · US Federal

Many Medical Devices Incapable of Supporting Transition to Post-Quantum Cryptography

An analysis of medical devices found that most cannot support post-quantum cryptography, leaving healthcare organizations exposed to future attacks from quantum computing. Only a fraction of devices in use today have the hardware or software capacity to handle the transition to stronger encryption standards.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare Critical
HIPAA Journal · · US Federal

Citrix Patches Third Actively Exploited NetScaler Zero Day

Citrix has issued a patch for a third actively exploited zero-day vulnerability in its NetScaler product, releasing the fix within days of addressing two previous flaws that were also under active attack.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare#security Read original →
Healthcare
HIPAA Journal · · US Federal

Website Privacy: Your Privacy Policy Makes Promises But Does Your Website Keep Them?

Many organizations publish privacy policies that do not reflect what their websites actually do, because compliance teams often lack full visibility into the third-party tools running on their sites, what data those tools collect, and where that data goes.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers · General readers · Policy

#healthcare#regulation#privacy Read original →
Healthcare
HIPAA Journal · · US Federal

CISA Sends CIRCIA Final Rule for White House Review

CISA has completed its final rule under the Cyber Incident Reporting for Critical Infrastructure Act and sent it to the White House for review. The rule, once approved, would establish mandatory cyber incident reporting requirements for critical infrastructure sectors.

Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers

#healthcare#regulation Read original →