HITECH Act
HITECH Regulations: What Covered Entities Must Know
In 2018, MD Anderson Cancer Center lost a $4.3 million appeal over HIPAA violations that hinged on provisions strengthened by the HITECH Act. The
Carl B. Johnson
Healthcare Chief Information Security Officer (CISO), Virtual Privacy Officer and HIPAA Compliance Educator and National Speaker on Healthcare Privacy & Security
HIPAA Certification
How Do You Get a HIPAA Certification? A Practical Guide
In early 2024, OCR settled with a healthcare clearinghouse for $1.4 million after an investigation revealed that workforce members had never completed meaningful HIPAA
HIPAA Certification
How Long Do HIPAA Certifications Last? What You Need to Know
In 2023, OCR settled with a small dental practice for $50,000 after investigators found that not a single employee had completed HIPAA training in
HIPAA Certification
How Long Does It Take to Get HIPAA Certified?
In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had no documented HIPAA training program — despite operating for
OSHA Compliance
How to Become OSHA Compliant in Healthcare Settings
In 2023, OSHA issued over $4.3 million in penalties to healthcare facilities for violations ranging from bloodborne pathogen exposure to inadequate hazard communication. What
HIPAA Certification
How to Get a HIPAA Certification for Free in 2025
In March 2024, OCR settled with a small medical practice in California for $100,000 after an investigation revealed that not a single employee had
HIPAA Certification
How to Obtain HIPAA and OSHA Certification
Every January, OCR publishes a reminder that workforce training failures remain among the top reasons healthcare organizations face enforcement actions. In 2023 alone, multiple settlements
How to Protect PHI
How to Protect PHI: A Practical Guide for Covered Entities
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over
HIPAA Compliant Email
How to Send HIPAA Compliant Email: A Practical Guide
In 2023, a dental practice in New England paid over $50,000 to settle an OCR investigation triggered by a single unencrypted email containing patient
HIPAA Compliance
Importance of HIPAA: Why Compliance Is Non-Negotiable
In February 2024, OCR settled with a healthcare system for $4.75 million after a phishing attack compromised the protected health information of over 100,
HIPAA Forms
Medical HIPAA Form Requirements Your Practice Must Follow
In 2023, OCR settled with a dental practice in New England for $23,000 after an investigation revealed, among other violations, that the practice had
HIPAA Training
Online OSHA and HIPAA Training: What Healthcare Orgs Need
Why Healthcare Organizations Are Combining OSHA and HIPAA Into One Training Strategy In 2023, OCR settled with a covered entity for $1.3 million after