OSHA HIPAA
OSHA HIPAA: Where Workplace Safety Meets Patient Privacy
The Phone Call That Exposed a $1.7 Million Blind Spot A hospital safety officer called me three years ago, panicking. OSHA had requested employee
Carl B. Johnson
Healthcare Chief Information Security Officer (CISO), Virtual Privacy Officer and HIPAA Compliance Educator and National Speaker on Healthcare Privacy & Security
HIPAA Eligibility
HIPAA Eligibility: Who Must Comply and Why It Matters
A $5.1 Million Penalty That Started with a Simple Question In 2017, Memorial Healthcare System in Florida agreed to pay $5.1 million to
HIPAA Violation
Definition of HIPAA Violation: What Actually Counts
A hospital employee in Texas looks up her ex-husband's medical records out of curiosity. A dental office in Georgia tosses paper charts into
Patient Privacy Rights
Patient Privacy Rights: What Your Practice Gets Wrong
A Mother Couldn't Get Her Own Son's Medical Records — Then the Feds Got Involved In 2019, a small medical practice in
Minimum Necessary Standard
What Does It Mean to Follow the Minimum Necessary Standard?
A scheduling coordinator at a mid-size orthopedic practice pulled a patient's full medical record — psychiatric notes, HIV status, substance abuse history — just to
HIPAA Compliance
Is Zoom HIPAA Compliant? What You Actually Need to Know
A Psychiatrist Hit "Start Meeting" and Everything Went Wrong A behavioral health provider in the Midwest was using Zoom for patient sessions throughout
HIPAA Basics
What Does HIPAA Stand For? More Than You Think
A front desk receptionist at a dermatology clinic in Phoenix once told a patient's employer — over the phone — that the patient had been
HIPAA for Leaders Training
HIPAA for Leaders Training: Why Executives Own the Risk
The CEO Who Learned HIPAA the Hard Way In 2018, the owner of a small health plan called Filefax agreed to pay $100,000 to
HIPAA Violation Penalties
HIPAA Violation Penalties: What They Cost in 2026
A $4.75 Million Wake-Up Call That Started With One Unencrypted Laptop In 2014, New York-Presbyterian Hospital and Columbia University paid a combined $4.8
HIPAA Training
HIPAA Training for Healthcare Employees: What Works
A receptionist at a busy cardiology practice in Texas forwarded a patient's insurance form to her personal Gmail account. She wasn't
HIPAA Privacy Rule
The HIPAA Privacy Rule Applies to Which of the Following?
A Question That Gets People Fired Last year, I consulted with a medical billing company whose CEO genuinely believed HIPAA didn't apply to
Who Enforces HIPAA
Who Enforces HIPAA? The Agencies Behind the Fines
A $4.75 Million Wake-Up Call from an Agency You've Probably Underestimated In 2024, the Office for Civil Rights slapped a $4.75