The U.S. Department of Health and Human Services, Office of Civil Rights (“OCR”), announced on October 2, 2019, that it had entered into a settlement with a private dental practice that had violated the HIPAA Privacy Rule by posting patient protected health information (“PHI”) on Yelp.  The OCR received a complaint in 2016 from a