HIPAA Compliance Insights

Patient Identifiers

What Are Patient Identifiers Under HIPAA? A Clear Guide

A hospital in Texas once sent a spreadsheet of 3,400 patient records to a business associate — with every column of identifying data still intact.

Carl B. Johnson · Jun 9, 2026

HIPAA Compliance

Does HIPAA Only Apply to Healthcare Workers?

A billing company in Tennessee lost $2.3 million because its leadership believed HIPAA was a hospital problem, not theirs. CHSPSC LLC, a management company

Carl B. Johnson · Jun 9, 2026

HIPAA Compliance Training

What Is HIPAA Compliance Training? A Real-World Guide

A $4.3 Million Penalty Started With One Untrained Employee In 2019, the University of Texas MD Anderson Cancer Center lost its appeal of a

Carl B. Johnson · Jun 9, 2026

Incidental Disclosure

Incidental Disclosure Examples: What Counts Under HIPAA

A patient in the waiting room overhears a nurse call out another patient's name. A fax containing lab results lands on a shared

Carl B. Johnson · Jun 8, 2026

HIPAA Basics

HIPAA Is the Acronym For: What It Means in 2026

I once watched a hospital administrator spell it "HIPPA" on a staff memo — and nobody caught it for three weeks. It's

Carl B. Johnson · Jun 8, 2026

HIPAA AI Assistant

HIPAA AI Assistant: What Your Team Must Know in 2026

Your Chatbot Just Became a Liability A nurse pastes a patient's medication list into an AI chatbot to draft a care summary. It

Carl B. Johnson · Jun 7, 2026

HIPAA Need to Know

HIPAA Need to Know: The Rule That Prevents Most Breaches

A Receptionist, a Curiosity, and a $2.4 Million Problem In 2018, the University of Texas MD Anderson Cancer Center lost its appeal of a

Carl B. Johnson · Jun 7, 2026

HIPAA Cloud Compliance

HIPAA Cloud Compliance: What Most Orgs Get Wrong

A mid-size pediatric health network migrated to a popular cloud platform in 2022. They configured the servers, encrypted the data at rest, and assumed they

Carl B. Johnson · Jun 6, 2026

HIPAA Violation

HIPAA Violation in Healthcare: What Actually Triggers a Fine

A front-desk receptionist at a Florida orthopedic clinic looked up her ex-husband's new girlfriend in the EHR. She didn't download anything.

Carl B. Johnson · Jun 6, 2026

Anti-Kickback Statute

Anti-Kickback Statute Examples: Real Cases, Real Fines

A physician in South Florida refers every knee surgery patient to the same imaging center. In return, the imaging center pays him a monthly "

Carl B. Johnson · Jun 6, 2026

Employer HIPAA Violations

Employer HIPAA Violations: What Gets Companies Fined

The HR Director Who Shared Too Much Last year, an HR director at a mid-sized manufacturing company forwarded an employee's medical leave documentation

Carl B. Johnson · Jun 5, 2026

HIPAA Compliance Services

HIPAA Compliance Services: What You Actually Need

A $4.75 Million Wake-Up Call for Organizations That Thought They Were Covered In 2023, Banner Health paid $1.25 million to settle with OCR

Carl B. Johnson · Jun 5, 2026