HIPAA Compliance Insights

HIPAA and Privacy Act Training

HIPAA and Privacy Act Training: What You Must Know

A hospital in Texas fired a records clerk in 2023 after she accessed the medical files of 14 patients she had no clinical reason to

Carl B. Johnson · May 7, 2026

HIPAA Administrative Safeguards

How Many Administrative Areas Apply to HIPAA Regulations?

A single missing risk assessment cost Premera Blue Cross $6.85 million in 2020. Not a breach of millions of records — though that happened too.

Carl B. Johnson · May 7, 2026

HIPAA Telehealth

HIPAA Telehealth Guidance: What HHS OCR Expects in 2026

The Enforcement Hammer Dropped — and Telehealth Was in the Crosshairs In March 2023, HHS OCR announced that the telehealth enforcement discretion period — the pandemic-era flexibility

Carl B. Johnson · May 6, 2026

HIPAA Certified

HIPAA Certified: What It Really Means in 2026

Last month, a clinic administrator told me she'd hired a new medical assistant who was "HIPAA certified." She said it with

Carl B. Johnson · May 6, 2026

HIPAA Training

OSHA and HIPAA Training for Dental Offices Online

Last year, a two-dentist practice in the Midwest got hit with a corrective action plan from OCR — not because of a massive data breach, but

Carl B. Johnson · May 5, 2026

Fraud Waste and Abuse

Fraud Waste and Abuse in Healthcare: A HIPAA Guide

A $4.7 Billion Problem Hiding in Your Organization's Blind Spots In 2023, the Department of Justice recovered over $2.68 billion in

Carl B. Johnson · May 5, 2026

HIPAA Online Training

HIPAA Online Training: What Actually Works in 2026

A receptionist at a New York medical practice forwarded a patient's lab results to her personal Gmail account so she could "finish

Carl B. Johnson · May 5, 2026

HIPAA Exempt

HIPAA Exempt: Who Actually Qualifies and Who Doesn't

A gym owner in Texas once told me, straight-faced, that his business was HIPAA exempt because he wasn't a doctor. He collected health

Carl B. Johnson · May 4, 2026

HIPAA Basics

What Is Meant by HIPAA? A Practical Guide for 2026

Last year, a solo-practice dermatologist in Connecticut called me in a panic. She'd just received a letter from the Office for Civil Rights

Carl B. Johnson · May 4, 2026

HIPAA Protected Health Information

What Information Is Protected Under HIPAA Law

A hospital in Texas once faxed a patient's psychiatric records to the wrong physician's office — a solo practitioner across town who

Carl B. Johnson · May 4, 2026

HIPAA and Compliance Training

HIPAA and Compliance Training: What Actually Works

A receptionist at a dermatology clinic in New England forwarded a spreadsheet of 1,800 patient names and insurance IDs to her personal Gmail account.

Carl B. Johnson · May 3, 2026

California Confidentiality of Medical Information Act

California Confidentiality of Medical Information Act Guide

A $4,350 Fine Per Patient Record — And That's Just the State Penalty A few years ago, I worked with a behavioral health

Carl B. Johnson · May 3, 2026