HIPAA Title 1
What Does Title 1 of HIPAA Cover? A Clear Guide
A woman in Ohio loses her job on a Friday. By Monday, her daughter needs emergency surgery. Before 1996, that gap in employment could have
Carl B. Johnson
Healthcare Chief Information Security Officer (CISO), Virtual Privacy Officer and HIPAA Compliance Educator and National Speaker on Healthcare Privacy & Security
Subcontractor Business Associate Agreement
Subcontractor Business Associate Agreement: Your Guide
The Chain of Liability Nobody Wants to Think About In 2018, a medical transcription company called Advanced Medical Practice Management paid a $500,000 settlement
PHI Meaning
PHI Meaning: What Protected Health Information Really Covers
A Receptionist, a Fax Machine, and a $1.5 Million Problem A few years ago, I watched a small physician's practice unravel over
PHI Examples
Which of the Following Are Examples of PHI?
A medical receptionist forwards a patient's appointment reminder to her personal email so she can "finish up at home." That email
PHI Definition
PHI HIPAA Definition: What Actually Counts as PHI
A hospital employee in Texas looked up her ex-husband's medical records after a nasty divorce. No treatment purpose. No payment reason. Pure curiosity
HIPAA Basics
HIPAA Is Also Referred to as the Kennedy-Kassebaum Act
The Law With Two Names That Every Healthcare Worker Should Know I was running a compliance workshop for a hospital system in Atlanta when a
Telemedicine
Telemedicine and HIPAA Compliance: What You Must Know
A therapist in Florida conducts a video session with a patient using a consumer-grade messaging app. No encryption. No business associate agreement. No documentation of
HIPAA Retention Policy
HIPAA Retention Policy: What You Must Keep and For How Long
The Filing Cabinet That Cost a Hospital $2.3 Million In 2018, Cottage Health in California settled with the Office for Civil Rights (OCR) for
HIPAA Identifiers
HIPAA Identifiers: The 18 Data Points That Trigger Compliance
A Receptionist, a Spreadsheet, and 18 Data Points Nobody Counted A few years ago, I consulted for a mid-size clinic that had emailed a spreadsheet
HIPAA Examination
HIPAA Examination: What OCR Audits Actually Look For
A community health center in Georgia thought they were doing everything right. They had a privacy officer, a policies binder, and annual staff reminders about
HIPAA Compliance
Who HIPAA Applies To: Every Entity You Need to Know
A fitness app company thought HIPAA had nothing to do with them — until HHS came knocking. A county hospital assumed their janitorial contractor didn'
HIPAA Permission Form
HIPAA Permission Form: What You Must Get Right
The Form That Cost a Hospital $2.4 Million In 2018, the University of Texas MD Anderson Cancer Center lost a case before an administrative