HIPAA Compliance Insights

HIPAA Release of Information Form

HIPAA Release of Information Form: What You Must Get Right

A therapist's office in Connecticut faxed 47 pages of psychotherapy notes to an employer — all because someone handed them a generic HIPAA release

Carl B. Johnson · Aug 21, 2026

Total HIPAA Compliance

Total HIPAA Compliance: What It Actually Takes in 2026

A midsize hospital in Oklahoma thought they had it covered. Policies were printed. The IT team had installed encryption software. A training session happened once

Carl B. Johnson · Aug 20, 2026

HIPAA Basics

HIPAA Protects a Category of Information Called PHI

A therapist in a small group practice mentioned a patient's diagnosis during a casual hallway conversation with the front desk staff. No chart

Carl B. Johnson · Aug 20, 2026

HIPAA Compliance G Suite

HIPAA Compliance G Suite: What You Must Configure

A behavioral health practice in the Midwest thought they were covered. They'd signed Google's Business Associate Agreement, upgraded to Google Workspace

Carl B. Johnson · Aug 19, 2026

HIPAA Law

HIPAA Law: What Every Covered Entity Must Know in 2026

A Single Fax Machine Cost This Hospital $4.8 Million In 2019, a fax sent to the wrong number exposed 498 patients' protected health

Carl B. Johnson · Aug 19, 2026

HIPAA Authorization

Authorization of Release of Health Information Guide

A Missing Signature Cost One Hospital $865,000 In 2019, a patient filed a complaint with the Office for Civil Rights after a hospital released

Carl B. Johnson · Aug 18, 2026

HIPAA Forms

HIPPA Forms: What You Actually Need (and Spell)

Let me save you some trouble: the forms you're searching for when you type "hippa forms" are actually called HIPAA forms

Carl B. Johnson · Aug 18, 2026

Protected Health Information

Protected Health Information Under HIPAA: What Counts

A Receptionist's Casual Comment Cost a Hospital $4.3 Million In 2019, the University of Rochester Medical Center agreed to pay $3 million

Carl B. Johnson · Aug 17, 2026

HIPAA Security Awareness and Training

HIPAA Security Awareness and Training: What Most Get Wrong

A $4.3 Million Settlement Started with One Untrained Employee In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop and

Carl B. Johnson · Aug 17, 2026

HIPAA Courses

HIPAA Courses: What Actually Works and What Wastes Time

The Compliance Officer Who Thought a YouTube Video Was Enough I once consulted for a mid-size home health agency in Florida that had been using

Carl B. Johnson · Aug 16, 2026

HIPAA Release Form NJ

HIPAA Release Form NJ: What You Actually Need

A Bergen County Clinic Got This Wrong — and It Cost Them Everything Last year, I consulted with a multi-provider practice in northern New Jersey that

Carl B. Johnson · Aug 16, 2026

HIPAA Rules

What Are the HIPAA Rules? A Plain-English Breakdown

A hospital employee in Texas looks up her ex-husband's medical records after a bitter custody dispute. A small clinic in Georgia stores patient

Carl B. Johnson · Aug 15, 2026