HIPAA Compliance Insights

HIPAA Privacy Rule

HIPAA's Privacy Rule: What Your Organization Gets Wrong

In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had been disclosing patient records to a third-party marketing

Carl B. Johnson · Nov 26, 2024

HIPAA Compliance

HIPAA-Compliant Storage Requirements for Paper Records

In March 2023, OCR settled with a New England dermatology practice for $300,640 after an investigation revealed that the organization had been disposing of

Carl B. Johnson · Nov 26, 2024

HIPP Certification

HIPP Certification: What It Really Means for HIPAA

Every week, healthcare administrators search for "hipp certification" expecting to find a single credential that makes their organization HIPAA-compliant. The reality is more

Carl B. Johnson · Nov 26, 2024

HIPAA Agreement

HIPAA Agreement Requirements Every Organization Must Follow

In 2024, OCR settled with a New England dermatology practice for $300,000 after discovering that protected health information had been disclosed to a vendor

Carl B. Johnson · Nov 26, 2024

HIPAA and AI

HIPAA and AI: What Covered Entities Must Know Now

In late 2023, a large health system deployed a generative AI chatbot to assist clinical staff with documentation. Within weeks, workforce members were pasting entire

Carl B. Johnson · Nov 15, 2024

HIPAA Training

HIPPA Class: What You Actually Need for Compliance

Every week, thousands of healthcare workers search for a HIPPA class — and right away, there's a problem. The correct acronym is HIPAA: the

Carl B. Johnson · Nov 15, 2024

HIPAA Training

HIPPA Compliance Training for Employees: What's Required

In 2023, OCR settled with a Florida-based health system for $1.3 million after an investigation revealed that workforce members had been accessing patient records

Carl B. Johnson · Nov 15, 2024

HIPAA Compliant Cloud

HIPAA Compliant Cloud: What Covered Entities Must Know

In 2022, OCR settled with a health plan for $875,000 after an investigation revealed that protected health information stored in a cloud environment lacked

Carl B. Johnson · Nov 15, 2024

HIPAA Exceptions

HIPPA Exceptions: What HIPAA Actually Allows

In 2023, a small dental practice in Texas received an OCR investigation notice after a patient complained that the office shared medical records with a

Carl B. Johnson · Nov 15, 2024

HIPAA Laws

HIPAA Laws: What Every Healthcare Organization Must Know

In February 2023, OCR settled with a healthcare provider for $1.3 million after finding systemic failures to comply with basic HIPAA laws — failures that

Carl B. Johnson · Nov 15, 2024

HIPAA Rules

HIPPA Rules and Regulations: What You Actually Need to Know

In 2023, OCR settled with Doctors' Management Services for $100,000 after a ransomware attack exposed the protected health information of over 206,000

Carl B. Johnson · Nov 15, 2024

HIPAA Texting

HIPPA Texting: Why Text Messaging Puts Your PHI at Risk

In 2023, a dental practice in Texas paid a $50,000 settlement to OCR after a staff member texted a patient's treatment details

Carl B. Johnson · Nov 15, 2024