HIPAA Compliance Insights

HIPAA for Dental Offices

HIPAA for Dental Offices: What Most Practices Get Wrong

A front desk coordinator at a three-dentist practice in North Carolina handed a patient the wrong checkout summary. Attached to it was another patient'

Carl B. Johnson · May 10, 2026

HIPAA Training

OSHA and HIPAA Training for Dental Offices Online

Two Inspectors, One Waiting Room, Zero Excuses A dentist I worked with in Arizona got hit twice in the same quarter — an OCR audit letter

Carl B. Johnson · May 10, 2026

ePHI

What Is ePHI? The Digital Data That Costs Millions

A Single Unencrypted Laptop Changed Everything In 2017, a stolen laptop cost Lifespan Health System Affiliated Covered Entity (ACE) a $1,040,000 settlement with

Carl B. Johnson · May 9, 2026

HIPAA Violation Lawyer

HIPAA Violation Lawyer: When Your Organization Needs One

Last year, I watched a three-physician practice in the Midwest spend eleven months fighting an OCR investigation — without a lawyer for the first four. By

Carl B. Johnson · May 9, 2026

HIPAA Training

HIPPA Class? The HIPAA Training You Actually Need

Every week, thousands of people type "hippa class" into Google. I know because I've watched the search data for years. Here&

Carl B. Johnson · May 9, 2026

HIPAA Privacy Rule

HIPAA Privacy Rules Include PHI Such As These 18 Identifiers

A Single Spreadsheet Cost This Health Plan $6.85 Million In 2023, Premera Blue Cross agreed to a $6.85 million settlement with HHS after

Carl B. Johnson · May 8, 2026

HIPAA Risk Assessment Services

HIPAA Risk Assessment Services: What Actually Works

A dermatology practice in New England paid a vendor $4,000 for a "comprehensive HIPAA risk assessment." What they got back was a

Carl B. Johnson · May 8, 2026

Healthcare Kickbacks

What Are Kickbacks in Healthcare? A HIPAA Guide

The Referral Fee That Cost a Hospital System $260 Million In 2023, a Tennessee-based hospital operator agreed to pay $260 million to resolve allegations that

Carl B. Johnson · May 8, 2026

HIPAA and Privacy Act Training

HIPAA and Privacy Act Training: What You Must Know

A hospital in Texas fired a records clerk in 2023 after she accessed the medical files of 14 patients she had no clinical reason to

Carl B. Johnson · May 7, 2026

HIPAA Administrative Safeguards

How Many Administrative Areas Apply to HIPAA Regulations?

A single missing risk assessment cost Premera Blue Cross $6.85 million in 2020. Not a breach of millions of records — though that happened too.

Carl B. Johnson · May 7, 2026

HIPAA Telehealth

HIPAA Telehealth Guidance: What HHS OCR Expects in 2026

The Enforcement Hammer Dropped — and Telehealth Was in the Crosshairs In March 2023, HHS OCR announced that the telehealth enforcement discretion period — the pandemic-era flexibility

Carl B. Johnson · May 6, 2026

HIPAA Certified

HIPAA Certified: What It Really Means in 2026

Last month, a clinic administrator told me she'd hired a new medical assistant who was "HIPAA certified." She said it with

Carl B. Johnson · May 6, 2026