HIPAA Compliance Insights

HIPAA in a Nutshell

HIPAA in a Nutshell: What Every Healthcare Org Must Know

In 2023 alone, OCR settled or imposed civil money penalties in cases totaling over $4 million — and the majority involved failures that any organization with

Carl B. Johnson · Sep 30, 2025

HIPAA Compliance

HIPAA in Health Care: What Every Organization Must Know

In February 2024, OCR announced a $4.75 million settlement with a hospital system that failed to conduct an enterprise-wide risk analysis — a requirement that

Carl B. Johnson · Sep 30, 2025

HIPAA Basics

HIPAA Is Also Referred to as the Kennedy-Kassebaum Act

When OCR issues a corrective action plan or levies a six-figure penalty, the enforcement letter doesn't reference some obscure regulation — it cites the

Carl B. Johnson · Sep 30, 2025

HIPAA IT Support

HIPAA IT Support: What Your Tech Team Must Get Right

In 2023, OCR settled with a healthcare system for $1.3 million after an investigation revealed that a single misconfigured server — one that the IT

Carl B. Johnson · Sep 30, 2025

HIPAA Law California

HIPAA Law California: What Healthcare Orgs Must Know

When HIPAA Law California Compliance Gets Complicated In 2023, a mid-sized California medical group discovered the hard way that complying with federal HIPAA rules wasn&

Carl B. Johnson · Sep 30, 2025

HIPAA Compliance

The HIPAA List: Every Requirement Your Organization Must Meet

In February 2024, OCR settled with a small dental practice for $70,000 — not because of a massive data breach, but because the practice couldn&

Carl B. Johnson · Sep 30, 2025

HIPAA Log Retention

HIPAA Log Retention: What Your Organization Must Keep

When OCR investigated a midsize hospital system in 2023, investigators didn't just ask about the breach itself — they asked for six years of

Carl B. Johnson · Sep 30, 2025

HIPAA Mandate

HIPAA Mandate: What Your Organization Must Do Now

In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over

Carl B. Johnson · Sep 29, 2025

HIPAA Manual

HIPAA Manual for Dental Office: Build One That Works

In 2019, OCR settled with a dental practice in Texas for $10,000 after an investigation revealed the office had no written HIPAA policies, no

Carl B. Johnson · Sep 29, 2025

HIPAA Medical Privacy

HIPAA Medical Privacy: What Covered Entities Get Wrong

In February 2024, OCR settled with a New England health system for $1.3 million after investigators found that staff had been accessing patient records

Carl B. Johnson · Sep 29, 2025

HIPAA New Rules

HIPAA New Rules: What Your Organization Must Do Now

In December 2023, the HHS Office for Civil Rights published a Notice of Proposed Rulemaking (NPRM) that would represent the most significant overhaul of the

Carl B. Johnson · Sep 29, 2025

Notice of Privacy Practices

HIPAA Notice of Privacy Practices Requirements Explained

In 2022, OCR settled with a dental practice in New England for $30,000 after an investigation revealed — among other violations — that the practice had

Carl B. Johnson · Sep 29, 2025