HIPAA Compliance Insights

HIPAA Release Form

HIPPA Release Form: What You Actually Need to Know

Every single week, someone walks into a clinic, a law office, or an HR department and asks for a "hippa release form." I&

Carl B. Johnson · Aug 26, 2026

PHI

PHI Is an Acronym For: What It Means Under HIPAA

A Single Fax Changed Everything for This Clinic A dermatology practice in New England accidentally faxed a patient's lab results to a local

Carl B. Johnson · Aug 25, 2026

HIPAA Policy

HIPPA Policy or HIPAA Policy? What You Actually Need

You're Spelling It Wrong — And That's the Least of Your Problems Every week, thousands of people search for "hippa policy.

Carl B. Johnson · Aug 25, 2026

Minimum Necessary Rule

When Does the Minimum Necessary Rule Not Apply?

A hospital compliance officer once told me she spent three months building an elaborate minimum necessary policy — role-based access matrices, tiered authorization levels, the works.

Carl B. Johnson · Aug 24, 2026

HIPAA Enforcement

HIPAA Enforced By: Who Actually Holds You Accountable

A $4.75 Million Penalty — And the Office That Signed It In 2022, a single medical center in New York received a $4.75 million

Carl B. Johnson · Aug 24, 2026

HIPAA Lawsuit

HIPAA Lawsuit: What Actually Triggers One in 2026

A surgeon in Oklahoma texts a patient's lab results to the wrong phone number. Three weeks later, the patient's attorney files

Carl B. Johnson · Aug 23, 2026

HIPAA Cloud Security

HIPAA Cloud Security: What You're Getting Wrong

A $4.75 Million Cloud Assumption In 2020, a health system executive told me their patient data was "totally secure" because they'

Carl B. Johnson · Aug 23, 2026

HIPAA Violation Cases

Recent Real Life HIPAA Violation Cases to Study

A hospital employee in Louisiana looked up her ex-husband's medical records out of curiosity. A health plan in Massachusetts left the PHI of

Carl B. Johnson · Aug 22, 2026

HIPAA Covered Entities

Who Is Covered Under the HIPAA Rules? A Clear Guide

A solo chiropractor in New England assumed HIPAA didn't apply to her practice. She had fewer than ten employees, no electronic health records

Carl B. Johnson · Aug 22, 2026

HIPAA or HIPPA

HIPAA or HIPPA: Why Getting the Name Right Matters

One Misspelled Word That Tells Me Everything About Your Compliance Program I once walked into a medical office where every break room poster, every employee

Carl B. Johnson · Aug 22, 2026

HIPAA Compliance

What Is the HIPAA Compliance Standard in 2026?

A small dermatology practice in Connecticut lost $150,000 in a single afternoon. Not from a lawsuit. Not from a bad investment. From a corrective

Carl B. Johnson · Aug 21, 2026

PHI Data

PHI Data: What Counts, What Doesn't, and What Gets You Fined

A Spreadsheet That Cost $6.85 Million In 2018, Premera Blue Cross agreed to pay $6.85 million to the Office for Civil Rights after

Carl B. Johnson · Aug 21, 2026