HIPAA Compliance Insights

HIPAA Forms

How to Fill Out a HIPAA Form: A Practical Guide

In 2023, OCR settled with a dental practice for $350,000 after an investigation revealed the organization was routinely using deficient authorization forms that failed

Carl B. Johnson · Jul 7, 2024

Patient Identifiers

Information That Contains One or More Patient Identifiers

Why a Single Patient Identifier Triggers Full HIPAA Protection In 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation

Carl B. Johnson · Jun 18, 2024

Anti Kickback Statute

Intent of Anti Kickback Statute and HIPAA Compliance

In 2023, the Department of Justice recovered over $2.68 billion in healthcare fraud settlements and judgments — a significant portion tied to Anti-Kickback Statute (AKS)

Carl B. Johnson · Jun 18, 2024

HIPAA Email

Is Email PHI? What HIPAA Actually Requires for Email

In December 2023, OCR settled with a healthcare system for $480,000 after an investigation revealed workforce members had been emailing unencrypted patient information to

Carl B. Johnson · Jun 18, 2024

HIPAA Compliance

Is Google Hangouts HIPAA Compliant? What You Must Know

In early 2023, a small behavioral health practice in the Midwest contacted me after receiving a patient complaint. A clinician had been conducting therapy sessions

Carl B. Johnson · Jun 18, 2024

HIPAA Compliance

Is HIPAA Only for Medical Professionals? Not Even Close

In 2023, OCR settled a case with a dental management company — not a dentist, not a hospital, but an administrative services firm — for $350,000

Carl B. Johnson · Jun 18, 2024

HIPAA Basics

Is HIPPA the Right Spelling? Understanding HIPAA

OCR investigators don't grade your spelling — but if your compliance policies, workforce training materials, or Notice of Privacy Practices consistently reference "HIPPA&

Carl B. Johnson · Jun 18, 2024

HIPAA Violation

Is Telling a Story About a Patient a HIPAA Violation?

A nurse finishes a difficult shift and, over dinner with friends, recounts a dramatic case from the ER — the injuries, the treatment, the patient'

Carl B. Johnson · May 20, 2024

HIPAA Texting

Is Texting a Patient a HIPAA Violation? What to Know

In 2023, a dental practice in Texas received a $50,000 OCR settlement after a staff member texted appointment details — including treatment information — to the

Carl B. Johnson · May 20, 2024

HIPAA Disclosures

When It Would Be Appropriate to Release Patient Information To

In 2023, OCR settled with a covered entity for $1.3 million after workforce members disclosed protected health information to unauthorized individuals — people who seemed

Carl B. Johnson · May 6, 2024

HIPAA Updates

Latest HIPAA Updates: What Changed in 2024 and 2025

In December 2023, OCR issued its largest-ever HIPAA settlement — a $4.75 million penalty against Montefiore Medical Center after a workforce member stole protected health

Carl B. Johnson · May 6, 2024

HIPAA Violation

Lawsuit for HIPAA Violation: What You Need to Know

In 2023, a Florida hospital system paid $1.3 million after a former employee accessed the protected health information of over 1,500 patients without

Carl B. Johnson · May 6, 2024