HIPAA Compliance Insights

HIPAA History

What Year Was HIPAA Passed? The Full Story Behind the Law

A senator from Kansas and a senator from Massachusetts walked into a markup session in 1996 and changed healthcare forever. That's not the

Carl B. Johnson · Jun 5, 2026

HIPAA Privacy Form

HIPPA Privacy Form: What You Actually Need in 2026

You're Searching for a "HIPPA Privacy Form" — Let's Fix That First Every week, thousands of people search for a

Carl B. Johnson · Jun 4, 2026

GLP-1

GLP-1 Privacy Nightmare: Why "My Healthcare Data Is Everywhere" Is About to Become a HIPAA Story

A friend texted me in all caps that her GLP weight loss data was everywhere. The HIPAA, FDA, and FTC implications behind the GLP-1 gold rush that every healthcare organization needs to understand—and why training your workforce can't wait.

Carl B. Johnson · Jun 4, 2026

BAA Contract

BAA Contract: What You Must Get Right in 2026

The Missing Signature That Cost a Health System $4.3 Million In 2016, Advocate Health Care Network settled with the Office for Civil Rights (OCR)

Carl B. Johnson · Jun 4, 2026

Covered Entity

Who Is a Covered Entity Under HIPAA? A Clear Guide

The $4.3 Million Mistake That Started With One Wrong Assumption In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices

Carl B. Johnson · Jun 3, 2026

Safe Harbor Law

What Is the Safe Harbor Law Under HIPAA?

A Single Missing Step Cost This Health System $4.3 Million In 2023, OCR announced a $4.3 million settlement with Lafourche Medical Group after

Carl B. Johnson · Jun 3, 2026

OHS Compliance

OHS Compliance and HIPAA: What Healthcare Leaders Miss

The Bloodborne Pathogen Report That Triggered a HIPAA Investigation A mid-sized hospital in the Midwest filed an OSHA incident report after a needle stick injury.

Carl B. Johnson · Jun 2, 2026

HIPAA Titles

5 Titles of HIPAA: What Each One Actually Does

Most people in healthcare think HIPAA is a privacy law. It is — but that's only one piece. The full statute contains five distinct

Carl B. Johnson · Jun 2, 2026

HIPAA Security Rule

Which of the Following Are General Security Rules Under HIPAA

A radiology practice in Tennessee got hit with a $3 million penalty because they let a former employee keep access to a cloud server holding

Carl B. Johnson · Jun 2, 2026

HIPAA Security Rule

Who Is Responsible for Enforcing HIPAA Security Rule?

In February 2023, Banner Health paid $1.25 million to settle allegations that it failed to conduct an enterprise-wide risk analysis — a core requirement of

Carl B. Johnson · Jun 1, 2026

HIPAA Security Certification

HIPAA Security Certification: What It Really Takes

Last year, a compliance officer at a mid-size hospital system in Texas told me she'd spent $14,000 on a vendor's

Carl B. Johnson · Jun 1, 2026

De-Identification

De Identified Health Information Is Subject to the Privacy Rule — Or Is It?

The Statement That Trips Up Even Experienced Compliance Officers Here's a question I've watched rooms full of healthcare professionals get wrong:

Carl B. Johnson · Jun 1, 2026