HIPAA Compliance Insights

HIPAA Laws Privacy

HIPAA Laws Privacy: What Actually Gets Enforced

A dermatology practice in Massachusetts left a voicemail on a patient's home phone, confirming a diagnosis in front of the patient's

Carl B. Johnson · Aug 11, 2026

HIPAA Start Date

HIPAA Start Date: Key Dates Every Covered Entity Must Know

August 21, 1996 — The Day Most People Get Wrong Ask a room full of compliance officers about the HIPAA start date, and you'll

Carl B. Johnson · Aug 11, 2026

HIPAA Certified Cloud

HIPAA Certified Cloud: What That Label Really Means

There's No Such Thing as a HIPAA Certified Cloud — And That's the Problem Last year, a health tech startup told me

Carl B. Johnson · Aug 11, 2026

HIPAA Importance

HIPAA Importance: Why It Matters More in 2026

A Single Fax Machine Cost One Health System $4.3 Million In 2023, Banner Health agreed to a $1.25 million settlement with the Office

Carl B. Johnson · Aug 10, 2026

HIPAA Breach Notification

HIPAA Breach Notification: What Your 60-Day Clock Really Means

A hospital in Oklahoma discovers that an employee has been snooping through patient records for three months. Leadership finds out on a Tuesday. They spend

Carl B. Johnson · Aug 10, 2026

HIPAA Document Retention

HIPAA Document Retention Requirements Explained

A Filing Cabinet Almost Cost This Clinic $150,000 A few years ago, I consulted with a small orthopedic clinic in the Midwest that had

Carl B. Johnson · Aug 10, 2026

HIPAA Basics

HIPAA Is the Acronym For: What It Means in 2026

It's the Most Misspelled Acronym in Healthcare — And Most People Get the Meaning Wrong Too I once sat in a compliance meeting where

Carl B. Johnson · Aug 9, 2026

HIPAA Compliance

What Information Can Be Shared Without Violating HIPAA

Not Everything Is a Violation — But Most People Don't Know Where the Line Is A nurse at a mid-size hospital once told me

Carl B. Johnson · Aug 9, 2026

ePHI

Which of the Following Is Not Electronic PHI?

I was reviewing a dental practice's risk analysis last year when the office manager pointed at a paper chart and asked, "This

Carl B. Johnson · Aug 8, 2026

HIPAA Rules

3 Rules of HIPAA: What Every Covered Entity Must Know

In 2018, a Texas cancer center paid $4.3 million to HHS after two unencrypted devices containing ePHI went missing. The root cause wasn'

Carl B. Johnson · Aug 8, 2026

HIPAA Privacy Rule

HIPAA Privacy Rule Applies to Which of the Following?

A therapist in private practice once told me she didn't think HIPAA applied to her because she wasn't a hospital. A

Carl B. Johnson · Aug 8, 2026

PHI

HIPAA: What Is PHI and Why It Costs Millions

A nurse at a small dermatology practice in Connecticut posted a selfie on Instagram. In the background, a patient's intake form sat on

Carl B. Johnson · Aug 7, 2026