HIPAA Compliance Insights

De-Identification

De Identified Health Information Is Subject to the Privacy Rule — Or Is It?

The Statement That Trips Up Even Experienced Compliance Officers Here's a question I've watched rooms full of healthcare professionals get wrong:

Carl B. Johnson · Jun 1, 2026

Sexual Harassment

They Told Her to Just Deal With It. She Posted on Reddit. Then 10,000 Healthcare Workers Responded.

Sexual harassment of healthcare workers is disturbingly common. Here's what your employer owes you — and why formal training is the absolute minimum.

Carl B. Johnson · May 31, 2026

HIPAA Rules and Compliance

HIPAA Rules and Compliance: What Actually Gets You Fined

A $4.75 Million Fine Started with a Single Stolen Laptop In 2014, New York-Presbyterian Hospital and Columbia University Medical Center paid a combined $4.

Carl B. Johnson · May 31, 2026

HIPAA Training

HIPAA Training for Healthcare Workers: What 2026 Demands

A hospital receptionist in Texas forwarded a patient's lab results to the wrong email address. It took fourteen seconds. The breach affected one

Carl B. Johnson · May 31, 2026

HIPAA Breach

Definition of HIPAA Breach: What Actually Triggers One

A receptionist at a pediatric clinic prints a patient's immunization record and accidentally leaves it on the front counter for forty-five minutes. A

Carl B. Johnson · May 31, 2026

HIPAA Training Requirements

HIPAA Training Requirements for Employers: 2026 Guide

A pediatric nonprofit in Idaho lost $387,200 because one employee — one — opened a phishing email and exposed the ePHI of 10,000 patients. When

Carl B. Johnson · May 30, 2026

HIPAA Form

HIPAA Form Requirements: What You Actually Need

A physician's office in Connecticut handed every new patient a single sheet of paper labeled "HIPAA Form" at the front desk.

Carl B. Johnson · May 30, 2026

HIPAA History

When Did HIPAA Take Effect? Key Dates You Must Know

A Law Signed in 1996 That Didn't Really Bite Until Years Later Here's a question I get surprisingly often from compliance

Carl B. Johnson · May 30, 2026

HIPAA Login

HIPAA Login Requirements: Secure Access to ePHI

One Shared Password Cost This Hospital $2.14 Million In 2018, a hospital employee used a colleague's login to access patient records for

Carl B. Johnson · May 29, 2026

Explain HIPAA

Explain HIPAA: What It Actually Means for Your Team

A receptionist at a small cardiology practice in Arizona looked up her ex-husband's medical records one afternoon. She didn't share them.

Carl B. Johnson · May 29, 2026

HIPAA for Mental Health Professionals

HIPAA for Mental Health Professionals: A 2026 Guide

A Therapist's Worst Nightmare Starts with a Fax Machine A licensed counselor in a mid-sized practice hit "send" on a fax

Carl B. Johnson · May 29, 2026

HIPAA Disclosure Form

HIPAA Disclosure Form: What You Must Get Right in 2026

A hospital in Texas faxed 277 patient records to the wrong physician's office. No authorization on file. No tracking log. No documentation that

Carl B. Johnson · May 28, 2026