HIPAA Compliance Insights

HIPAA Privacy Rule

The HIPAA Privacy Rule Applies to Which of the Following?

A Question That Costs Organizations Millions Every Year I got a call last year from a medical billing company owner who was convinced HIPAA didn&

Carl B. Johnson · Aug 30, 2026

HIPAA History

When Did HIPAA Become a Law? The Full Timeline

On August 21, 1996, President Bill Clinton picked up a pen and signed a law that most people in healthcare wouldn't feel the

Carl B. Johnson · Aug 30, 2026

HIPAA Rules

What Are the Two Main Rules of HIPAA? A Clear Guide

In 2018, a small insurance company called Anthem paid $16 million to the Office for Civil Rights — the largest HIPAA settlement in history at that

Carl B. Johnson · Aug 30, 2026

HIPAA Privacy Form

HIPAA Privacy Form: What It Must Include in 2026

A Stack of Unsigned Forms Doesn't Mean You're Compliant I walked into a pediatric clinic last year and asked to see

Carl B. Johnson · Aug 29, 2026

HIPAA Penalties

What Is the Penalty for a HIPAA Violation in 2026?

In 2018, a small Texas health system called MD Anderson Cancer Center lost three unencrypted devices containing patient records. The result? A $4.3 million

Carl B. Johnson · Aug 29, 2026

HIPAA and OSHA Certification Online

HIPAA and OSHA Certification Online: What Actually Counts

Last year, a medical office manager in Ohio told me she'd purchased a bundled "HIPAA and OSHA certification online" package for

Carl B. Johnson · Aug 29, 2026

HIPAA Authorizations

HIPAA Authorizations: What Most Covered Entities Get Wrong

A hospital in Texas released ten years of a patient's psychiatric records to an employer — all because a front-desk employee accepted an authorization

Carl B. Johnson · Aug 28, 2026

HIPAA Compliance

HIPAA Compliance Requirements for Telehealth Apps

A Telehealth Startup's $1.5 Million Wake-Up Call In 2023, a mental health telehealth company called Cerebral agreed to a $7.1 million

Carl B. Johnson · Aug 28, 2026

HIPAA and AI

HIPAA and AI: What Covered Entities Must Know in 2026

A hospital in the Midwest fed three years of patient discharge summaries into a generative AI tool last year. The goal was noble — predict readmission

Carl B. Johnson · Aug 27, 2026

HIPAA Compliance

Who Is Responsible for Implementing HIPAA Regulations?

In 2018, a small Texas health plan paid $100,000 to settle HIPAA violations after a breach involving fewer than 500 individuals. The organization'

Carl B. Johnson · Aug 27, 2026

Violations of HIPAA

Violations of HIPAA: Real Cases and Real Costs

A Receptionist, a Celebrity, and a $4.3 Million Fine In 2019, the University of Rochester Medical Center paid $3 million to settle with OCR

Carl B. Johnson · Aug 27, 2026

HIPAA Disclosure Accounting

Under HIPAA a Disclosure Accounting Is Required: What to Know

A patient walks into your front office and asks for a list of everyone you've shared their medical records with over the past

Carl B. Johnson · Aug 26, 2026