HIPAA Compliance Insights

HITECH Act

What Is the HIPAA HITECH Act? A Practical Guide

In February 2011, Cignet Health of Prince George's County, Maryland received a $4.3 million penalty from the Office for Civil Rights — the

Carl B. Johnson · Jun 19, 2026

HIPAA Nurse Violations

HIPAA Nurse Violations: Real Cases and Real Consequences

A nurse in New York pulled up her ex-boyfriend's medical record on a slow Tuesday night. She didn't copy it. She

Carl B. Johnson · Jun 19, 2026

Business Associate

Which of These Entities Could Be a Business Associate?

A managed IT company in Tennessee gets hit with a $2.3 million settlement from HHS because a hospital never signed a business associate agreement

Carl B. Johnson · Jun 18, 2026

HIPAA Enforcement

In What Year Did HIPAA Become Enforceable? The Real Timeline

A hospital in Phoenix gets slapped with a $1.7 million penalty for failing to protect patient records. The year is 2023. But rewind two

Carl B. Johnson · Jun 18, 2026

Electronic Health Records

Electronic Health Records HIPAA Compliance in 2026

A single misconfigured EHR user account cost Anthem, Inc. $16 million in 2018 — still the largest HIPAA settlement in history. The breach exposed nearly 79

Carl B. Johnson · Jun 17, 2026

HIPAA Subpoena Rules

Can I Subpoena Medical Records? HIPAA Rules Explained

A paralegal calls your office on a Tuesday afternoon. She says she's sending over a subpoena for a patient's medical records

Carl B. Johnson · Jun 17, 2026

Covered Entity

What Is a Covered Entity Under HIPAA? A Clear Guide

A few years ago, I got a call from the owner of a small billing company in Ohio. She was convinced HIPAA didn't

Carl B. Johnson · Jun 17, 2026

HIPAA Omnibus Rule

HIPAA Omnibus Rule: What It Changed and Why It Matters

In January 2013, HHS dropped the largest single regulatory update in HIPAA's history — and most organizations still haven't fully absorbed what

Carl B. Johnson · Jun 16, 2026

HIPAA Court Cases

HIPAA Court Cases: 7 Landmark Rulings You Must Know

A hospital executive stared at a $4.3 million settlement notice and realized the breach could have been prevented with a single encrypted laptop. That&

Carl B. Johnson · Jun 16, 2026

HIPAA Penalties

How Civil and Monetary Penalties for Violations Are Assessed

In February 2023, Banner Health agreed to pay $1.25 million to the Office for Civil Rights after a breach exposed the electronic protected health

Carl B. Johnson · Jun 16, 2026

HIPAA Privacy Form

HIPAA Privacy Form: What It Must Include in 2026

A woman walked into a dermatology clinic in Phoenix, checked in at the front desk, and was handed a clipboard with a single sheet of

Carl B. Johnson · Jun 15, 2026

HIPAA Training

Best Course for HIPAA: What Actually Works in 2026

A $4.3 Million Fine Started with a Training Gap In 2023, the University of Texas MD Anderson Cancer Center lost its final appeal on

Carl B. Johnson · Jun 15, 2026