HIPAA Compliance Insights

HIPAA Waiver Form

HIPAA Waiver Form: What You Actually Need to Know

Every week, someone contacts me asking for a "hippa waiver form" — and every week, I have to deliver the same corrective message. There

Carl B. Johnson · Jan 8, 2021

HIPAA BAA

HIPAA BAA: What Every Covered Entity Must Get Right

In 2024, OCR settled with a New England dermatology practice for $300,640 after investigators found that protected health information had been disclosed to a

Carl B. Johnson · Jan 3, 2021

HIPAA Forms

HIPAA Form Requirements Your Organization Must Follow

In 2023, OCR settled with a dental practice for $50,000 after investigators discovered the organization had been using an outdated authorization form that failed

Carl B. Johnson · Jan 3, 2021

HIPAA Law

HIPPAA Law: What You Need to Know About HIPAA

If you searched for "HIPPAA law" to get here, you're in good company. It's one of the most common

Carl B. Johnson · Jan 3, 2021

HITECH Act

HITECH Regulations: What Covered Entities Must Know

In 2018, MD Anderson Cancer Center lost a $4.3 million appeal over HIPAA violations that hinged on provisions strengthened by the HITECH Act. The

Carl B. Johnson · Dec 8, 2020

HIPAA Certification

How Do You Get a HIPAA Certification? A Practical Guide

In early 2024, OCR settled with a healthcare clearinghouse for $1.4 million after an investigation revealed that workforce members had never completed meaningful HIPAA

Carl B. Johnson · Dec 8, 2020

HIPAA Certification

How Long Do HIPAA Certifications Last? What You Need to Know

In 2023, OCR settled with a small dental practice for $50,000 after investigators found that not a single employee had completed HIPAA training in

Carl B. Johnson · Nov 26, 2020

HIPAA Certification

How Long Does It Take to Get HIPAA Certified?

In 2023, OCR settled with a dental practice for $350,000 after investigators found the organization had no documented HIPAA training program — despite operating for

Carl B. Johnson · Nov 26, 2020

OSHA Compliance

How to Become OSHA Compliant in Healthcare Settings

In 2023, OSHA issued over $4.3 million in penalties to healthcare facilities for violations ranging from bloodborne pathogen exposure to inadequate hazard communication. What

Carl B. Johnson · Nov 17, 2020

HIPAA Certification

How to Get a HIPAA Certification for Free in 2025

In March 2024, OCR settled with a small medical practice in California for $100,000 after an investigation revealed that not a single employee had

Carl B. Johnson · Nov 17, 2020

HIPAA Certification

How to Obtain HIPAA and OSHA Certification

Every January, OCR publishes a reminder that workforce training failures remain among the top reasons healthcare organizations face enforcement actions. In 2023 alone, multiple settlements

Carl B. Johnson · Nov 17, 2020

How to Protect PHI

How to Protect PHI: A Practical Guide for Covered Entities

In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over

Carl B. Johnson · Nov 17, 2020