The Department of Health and Human Services Office for Civil Rights (OCR) investigated a record-number of alleged HIPAA violations in 2016. A recent settlement between OCR and a health system in the State of Texas reflects that OCR investigations and enforcement actions will continue at high-volume through 2017, and serves as an example of the liabilities associated with unintended (yet impermissible) disclosures prohibited under HIPAA.