HIPAA Compliance
HIIPA Compliant? Fix the Spelling, Then Fix Your Program
You Searched "HIIPA Compliant" — Here's Why That Matters More Than You Think I see it in emails from clinic managers, in
Carl B. Johnson
Healthcare Chief Information Security Officer (CISO), Virtual Privacy Officer and HIPAA Compliance Educator and National Speaker on Healthcare Privacy & Security
HIPAA Violations
Consequences of Violating HIPAA: What Actually Happens
A nurse in Tennessee pulls up her ex-husband's medical records out of curiosity. She doesn't share them. She doesn't
OSHA Compliance Certification
OSHA Compliance Certification and HIPAA: What You Need
The Exam Room Where Two Federal Agencies Collided A medical assistant in a Texas urgent care clinic stuck herself with a contaminated needle in 2023.
HIPAA Basics
Does HIPAA Apply to Private Individuals? The Truth
A woman in Ohio once called the HHS Office for Civil Rights to file a complaint against her neighbor. The neighbor, she claimed, had told
HHS OCR Enforcement
HHS OCR HIPAA Enforcement News: What 2026 Means for You
A $4.75 Million Wake-Up Call That Most Providers Slept Through In February 2024, Montefiore Medical Center in New York agreed to a $4.75
HITECH Act
HITECH Act: What It Actually Means for HIPAA in 2026
A Single Law Turned HIPAA From a Suggestion Into a Sledgehammer In February 2009, most healthcare organizations treated HIPAA like a dusty policy binder on
HIPAA Three Rules
HIPAA Three Rules: What Every Covered Entity Must Know
A small dermatology practice in Massachusetts lost an unencrypted thumb drive in 2019. It contained the ePHI of 2,200 patients. When HHS investigated, they
Cloud HIPAA
Cloud HIPAA Compliance: What You Must Get Right
A major health system migrated its entire patient scheduling platform to the cloud in 2022. They picked a well-known vendor. They assumed the vendor "
PHI
Which of the Following Items Does Not Contain PHI?
A medical assistant at a cardiology practice in Texas forwarded a spreadsheet to her personal email so she could "finish some work at home.
HIPAA Patients Rights
HIPAA Patients Rights: What Your Practice Owes Every Person Who Walks In
A Woman in Texas Waited 13 Months for Her Own Medical Records She asked politely. Then she asked again. Then she filed a complaint with
HIPAA Enforcement
Who Oversees HIPAA? The Enforcers You Need to Know
A small clinic in Texas thought nobody was watching. They stored patient records on an unencrypted laptop, never trained their staff, and assumed their size
HIPAA Privacy Rule
The HIPAA Privacy Rule Applies to Which of the Following?
A Question That Costs Organizations Millions Every Year I got a call last year from a medical billing company owner who was convinced HIPAA didn&