How to Read an HHS Settlement Agreement: What an Exec Should Be Looking For

How to Read an HHS Settlement Agreement: What an Exec Should Be Looking For
TL;DR
  • HHS Resolution Agreements contain specific information executives can use to inform their own program: cited findings, settlement amounts, corrective action plan structures, and the patterns these reveal across the enforcement record.

  • A defensible reading practice extracts the cited findings, evaluates against the executive's organization, identifies remediation patterns, and informs program investment decisions.

  • The CFO question is not whether to read settlements. It is whether the reading produces substantive program insight rather than surface-level reassurance.

The Four Things to Extract From Every HHS Settlement You Read

  1. Cited findings: which specific deficiencies HHS named

  2. Settlement amount: dollar magnitude and the factors that drove it

  3. Corrective Action Plan structure: what remediation HHS imposed

  4. Patterns across multiple settlements: recurring categories signal where enforcement concentrates

 

How to Turn Settlement Patterns Into Budget Priorities

  • Compare the cited findings to the organization's own program

  • Where the same patterns exist, prioritize remediation

  • Use settlement amounts to size exposure

 

Why "That Settlement Doesn't Apply to Us" Is the Wrong Read

A CFO will hear: settlements are about other organizations, not relevant to ours.

False. Settlements reveal HHS enforcement patterns relevant to every covered entity.

 

The Structured Settlement Review That Informs the Compliance Budget

A CFO should work through structured reading of recent settlements applicable to the organization.

 

Read the Settlements — They're Public Guidance on Where HHS Is Looking

Settlements are public enforcement guidance. Reading produces program insight.

If your organization has not analyzed recent settlements in the last twelve months, that is the conversation worth having with your Tech-Operations partner.

Five Nines Technology Group is the Tech-Operations partner serving hospitals, clinic systems, and healthcare practices across the region. We focus on helping CFOs translate HHS enforcement records into program-specific insight.

Frequently asked questions

Where are settlements published?

HHS OCR website publishes them.

How often are new settlements released?

Continuously, with material settlements quarterly.

Should the board see settlement analysis?

Yes, in summary, with implications for the organization.

What about settlements involving organizations very different from ours?

Findings often transfer; the patterns are usually broadly applicable.

How does this interact with HHS investigation if it happens?

Documented analysis demonstrates program engagement.

Should we benchmark against settlement amounts?

As context for exposure sizing, not as targets.

How long does it take to read substantively?

Each settlement: thirty minutes to two hours depending on depth.

Related Blog Posts

The 10 HHS Audit Findings Most-Cited at Healthcare Organizations in 2026

The 10 HHS Audit Findings Most-Cited at Healthcare Organizations in 2026

What This Year's HIPAA Enforcement Record Has in Common The pattern is not subtle. HHS is not citing novel technical failures. The agency is citing...

Read More
The HIPAA Enforcement Curve: Why HHS Settlement Amounts Are Climbing for Small Clinics, and What a CFO Should Plan For

The HIPAA Enforcement Curve: Why HHS Settlement Amounts Are Climbing for Small Clinics, and What a CFO Should Plan For

The Six-Figure Settlement Over One Unencrypted Laptop A small specialty clinic in a Midwestern state, a practice with fewer than fifteen providers,...

Read More
Common HIPAA Risk Analysis Mistakes That Fail HHS Audits: The CEO Accountability View

Common HIPAA Risk Analysis Mistakes That Fail HHS Audits: The CEO Accountability View

The Five Risk Analysis Mistakes That Show Up in HHS Findings Incomplete scope (missing systems or vendors). Generic threat language (template...

Read More