Covered Entity
What Is a Covered Entity Under HIPAA? A Clear Guide
A few years ago, I got a call from the owner of a small billing company in Ohio. She was convinced HIPAA didn't
Carl B. Johnson
Healthcare Chief Information Security Officer (CISO), Virtual Privacy Officer and HIPAA Compliance Educator and National Speaker on Healthcare Privacy & Security
HIPAA Omnibus Rule
HIPAA Omnibus Rule: What It Changed and Why It Matters
In January 2013, HHS dropped the largest single regulatory update in HIPAA's history — and most organizations still haven't fully absorbed what
HIPAA Court Cases
HIPAA Court Cases: 7 Landmark Rulings You Must Know
A hospital executive stared at a $4.3 million settlement notice and realized the breach could have been prevented with a single encrypted laptop. That&
HIPAA Penalties
How Civil and Monetary Penalties for Violations Are Assessed
In February 2023, Banner Health agreed to pay $1.25 million to the Office for Civil Rights after a breach exposed the electronic protected health
HIPAA Privacy Form
HIPAA Privacy Form: What It Must Include in 2026
A woman walked into a dermatology clinic in Phoenix, checked in at the front desk, and was handed a clipboard with a single sheet of
HIPAA Training
Best Course for HIPAA: What Actually Works in 2026
A $4.3 Million Fine Started with a Training Gap In 2023, the University of Texas MD Anderson Cancer Center lost its final appeal on
HIPAA Basics
Abbreviation for HIPAA: What Each Letter Means
I was reviewing a compliance plan for a mid-size cardiology practice last year when I spotted something that stopped me cold. Their entire policy manual
HIPAA and OSHA Compliance
HIPAA and OSHA Compliance: Where the Two Overlap
A dental hygienist gets a needlestick injury. The office manager logs the incident in the OSHA Sharps Injury Log. Then she emails the details — including
HIPAA Training
OSHA and HIPAA Training for Dental Offices Online
The Inspection That Shut Down a Tuesday Morning A dental office in suburban Ohio lost an entire day of patients last year — not because of
HIPAA History
What Year Was HIPAA Signed Into Law? The Full Story
President Bill Clinton picked up a pen on August 21, 1996, and signed a law that would eventually touch every doctor's office, hospital,
HIPAA Identifiers
HIPAA Identifier Explained: The 18 Data Points That Matter
A Spreadsheet, a Social Security Number, and a $1.5 Million Settlement In 2018, Anthem Inc. paid $16 million to the Office for Civil Rights
Business Associate
Business Associate as Defined by HIPAA: What You Must Know
The $4.3 Million Mistake That Started With a Vendor Contract In 2016, Advocate Medical Group paid $5.55 million to settle HIPAA violations — and