HIPAA Compliance Insights

HIPAA Privacy Rule

What Is the Privacy Rule for HIPAA? A Real-World Guide

In 2023, a dermatology practice in Massachusetts paid $150,000 to the Office for Civil Rights after a patient's medical photographs were disclosed

Carl B. Johnson · Jun 21, 2026

Poor Communication in Healthcare

Poor Communication in Healthcare Examples That Led to HIPAA Fines

A nurse at a large hospital system picks up the phone and reads a patient's HIV status to the wrong family member. No

Carl B. Johnson · Jun 21, 2026

HIPAA Authorization

Authorization of Release of Health Information Rules

A hospital in Texas released three years of a patient's psychotherapy notes to an employer — based on a form the patient had signed

Carl B. Johnson · Jun 21, 2026

HIPAA Basics

HIPAA Basics for Providers: What You Must Know in 2026

A small cardiology practice in Oklahoma didn't think twice about faxing patient records to the wrong number. It happened once. Then twice. Then

Carl B. Johnson · Jun 20, 2026

Administrative Simplification

Administrative Simplification Section of HIPAA Explained

The Provision That Built Modern Healthcare Compliance In 1996, a senator from Kansas and a senator from Massachusetts got a bill signed into law that

Carl B. Johnson · Jun 20, 2026

HIPAA Regulations

HIPAA Regulations Are Designed to Protect More Than You Think

A $4.3 Million Wake-Up Call in a Hospital Basement In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted USB drive

Carl B. Johnson · Jun 19, 2026

HITECH Act

What Is the HIPAA HITECH Act? A Practical Guide

In February 2011, Cignet Health of Prince George's County, Maryland received a $4.3 million penalty from the Office for Civil Rights — the

Carl B. Johnson · Jun 19, 2026

HIPAA Nurse Violations

HIPAA Nurse Violations: Real Cases and Real Consequences

A nurse in New York pulled up her ex-boyfriend's medical record on a slow Tuesday night. She didn't copy it. She

Carl B. Johnson · Jun 19, 2026

Business Associate

Which of These Entities Could Be a Business Associate?

A managed IT company in Tennessee gets hit with a $2.3 million settlement from HHS because a hospital never signed a business associate agreement

Carl B. Johnson · Jun 18, 2026

HIPAA Enforcement

In What Year Did HIPAA Become Enforceable? The Real Timeline

A hospital in Phoenix gets slapped with a $1.7 million penalty for failing to protect patient records. The year is 2023. But rewind two

Carl B. Johnson · Jun 18, 2026

Electronic Health Records

Electronic Health Records HIPAA Compliance in 2026

A single misconfigured EHR user account cost Anthem, Inc. $16 million in 2018 — still the largest HIPAA settlement in history. The breach exposed nearly 79

Carl B. Johnson · Jun 17, 2026

HIPAA Subpoena Rules

Can I Subpoena Medical Records? HIPAA Rules Explained

A paralegal calls your office on a Tuesday afternoon. She says she's sending over a subpoena for a patient's medical records

Carl B. Johnson · Jun 17, 2026