HIPAA Privacy Rule
Which Is Not Considered an Identifier Under the Privacy Rule
A Lab Director's $100,000 Mistake Over a Spreadsheet Column A lab director at a mid-size hospital once told me she'd
Carl B. Johnson
Healthcare Chief Information Security Officer (CISO), Virtual Privacy Officer and HIPAA Compliance Educator and National Speaker on Healthcare Privacy & Security
HIPAA Patient Rights
Can a Doctor Access My Records Without Consent?
A woman in California walked into her new dermatologist's office and discovered something unsettling. Her previous provider — a physician she'd left
Incidental Disclosure
Examples of Incidental Disclosure Under HIPAA
The Conversation a Patient Overheard in Your Waiting Room A patient sits in your waiting room. She hears the receptionist confirm an appointment for another
Health Privacy Certification
Health Privacy Certification: What It Means in 2026
A radiology group in Tennessee paid $3.5 million to HHS after a single unauthorized disclosure of patient records. The root cause wasn't
Minimum Necessary Rule
Minimum Necessary Rule for HIPAA: A Practical Guide
A hospital employee in Texas pulled up the medical records of 4,000 patients she had no clinical reason to access. She was checking on
PHI and HIPAA
PHI and HIPAA: What Every Healthcare Worker Must Know
A Single Misrouted Fax Cost This Clinic $125,000 A small physician practice in Tennessee faxed a patient's lab results to a local
HIPAA Laws
What Are HIPAA Laws? A Plain-English Breakdown
A dermatology practice in New England paid $150,000 to the Office for Civil Rights because a single employee left a spreadsheet of patient names
HIPAA Certification
HIPA Certification: What You Actually Need in 2026
I get emails about "hipa certification" at least twice a week. Sometimes it's spelled "hippa," sometimes "hipa,"
Best Online HIPAA Training
Best Online HIPAA Training: What Actually Works in 2026
A dermatology practice in Massachusetts paid HHS $150,000 because a receptionist handed a patient's printed lab results to the wrong person. The
Healthcare Fraud
Definition of Fraud in Healthcare: What HIPAA Teams Must Know
A $4.3 Billion Problem Hiding in Plain Sight In 2023, the Department of Justice recovered over $2.2 billion in settlements and judgments related
Emergency Management
Emergency Management in Hospital: HIPAA Rules Apply
When the Code Goes Hospital-Wide, HIPAA Doesn't Clock Out A category 4 hurricane is bearing down on the Gulf Coast. Your hospital'
Healthcare Fraud and Abuse
What Is Fraud and Abuse in Healthcare? A HIPAA Guide
A physician in South Florida billed Medicare for over $100 million in home health services that were never provided. Patients who were perfectly healthy showed