HIPAA Compliance Insights

HIPAA Importance

HIPAA Importance: Why It Matters More in 2026

A Single Fax Machine Cost One Health System $4.3 Million In 2023, Banner Health agreed to a $1.25 million settlement with the Office

Carl B. Johnson · Aug 10, 2026

HIPAA Breach Notification

HIPAA Breach Notification: What Your 60-Day Clock Really Means

A hospital in Oklahoma discovers that an employee has been snooping through patient records for three months. Leadership finds out on a Tuesday. They spend

Carl B. Johnson · Aug 10, 2026

HIPAA Document Retention

HIPAA Document Retention Requirements Explained

A Filing Cabinet Almost Cost This Clinic $150,000 A few years ago, I consulted with a small orthopedic clinic in the Midwest that had

Carl B. Johnson · Aug 10, 2026

HIPAA Basics

HIPAA Is the Acronym For: What It Means in 2026

It's the Most Misspelled Acronym in Healthcare — And Most People Get the Meaning Wrong Too I once sat in a compliance meeting where

Carl B. Johnson · Aug 9, 2026

HIPAA Compliance

What Information Can Be Shared Without Violating HIPAA

Not Everything Is a Violation — But Most People Don't Know Where the Line Is A nurse at a mid-size hospital once told me

Carl B. Johnson · Aug 9, 2026

ePHI

Which of the Following Is Not Electronic PHI?

I was reviewing a dental practice's risk analysis last year when the office manager pointed at a paper chart and asked, "This

Carl B. Johnson · Aug 8, 2026

HIPAA Rules

3 Rules of HIPAA: What Every Covered Entity Must Know

In 2018, a Texas cancer center paid $4.3 million to HHS after two unencrypted devices containing ePHI went missing. The root cause wasn'

Carl B. Johnson · Aug 8, 2026

HIPAA Privacy Rule

HIPAA Privacy Rule Applies to Which of the Following?

A therapist in private practice once told me she didn't think HIPAA applied to her because she wasn't a hospital. A

Carl B. Johnson · Aug 8, 2026

PHI

HIPAA: What Is PHI and Why It Costs Millions

A nurse at a small dermatology practice in Connecticut posted a selfie on Instagram. In the background, a patient's intake form sat on

Carl B. Johnson · Aug 7, 2026

Technical Safeguards

Technical Safeguards Are Your First Line of ePHI Defense

A $4.3 Million Penalty Started With One Missing Safeguard In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices containing

Carl B. Johnson · Aug 7, 2026

HIPAA OSHA Training

HIPAA OSHA Training: What You Actually Need in 2026

The Phone Call That Starts With "We're From the Government" A medical practice in Texas gets two letters in the same

Carl B. Johnson · Aug 7, 2026

HIPAA Privacy Rule

Which Is Not Considered an Identifier Under the Privacy Rule

A Lab Director's $100,000 Mistake Over a Spreadsheet Column A lab director at a mid-size hospital once told me she'd

Carl B. Johnson · Aug 6, 2026