HIPAA Compliance Insights

HIPAA Cloud Compliance

HIPAA Cloud Compliance: What Most Orgs Get Wrong

A mid-size orthopedic practice in Connecticut migrated its entire patient scheduling system to the cloud in 2023. Six months later, a workforce member accidentally made

Carl B. Johnson · Sep 17, 2026

HIPAA Keyword

HIPAA Keyword Research: What Compliance Teams Search For

One Search Query Can Reveal an Entire Compliance Gap Last month I watched a privacy officer type a single keyword into Google: "what happens

Carl B. Johnson · Sep 17, 2026

Rules of HIPAA

Rules of HIPAA: What Every Covered Entity Must Know

A $4.3 Million Penalty That Started with One Missing Rule In 2016, Advocate Health Care Network paid $5.55 million to settle HIPAA violations

Carl B. Johnson · Sep 17, 2026

HIPAA Training for Employers

HIPAA Training for Employers: What You Owe Your Team

A single front-desk employee at a South Carolina medical practice printed a patient's billing record and handed it to the patient's

Carl B. Johnson · Sep 16, 2026

HIPAA Rules

HIPAA Rules: What Most People Get Wrong in 2026

It's HIPAA, Not HIPPA — And That Mistake Tells Me Everything I can tell how far along an organization is in its compliance journey

Carl B. Johnson · Sep 16, 2026

HIPAA Training for Employees

HIPPA Training for Employees: What Actually Works

A Misspelling That Reveals a Bigger Problem Let me tell you something I see constantly: organizations searching for "HIPPA training for employees" — with

Carl B. Johnson · Sep 16, 2026

PHI Meaning

PHI Meaning: What Protected Health Information Really Covers

A $4.3 Million Mistake That Started with a Spreadsheet In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted USB drive

Carl B. Johnson · Sep 15, 2026

HIPAA Violations

What Is a HIPAA Violation? Real Cases, Real Fines

A nurse in Texas pulls up her ex-husband's medical record out of curiosity. A front desk employee at a dermatology clinic posts a

Carl B. Johnson · Sep 15, 2026

HITECH Act

HITECH Act Expert Witness: What You Need to Know

A $4.3 Million Settlement — and the Expert Who Made It Make Sense In 2014, the HHS Office for Civil Rights announced a $4.3

Carl B. Johnson · Sep 14, 2026

HIPAA Covered Entities

Who Is Covered by HIPAA? The Answer Isn't Obvious

A few years ago, I got a call from the owner of a medical billing company in Georgia. She was panicked. The Office for Civil

Carl B. Johnson · Sep 14, 2026

HIPAA Compliance Forms

HIPAA Compliance Forms for Employees: What You Need

Last year, I reviewed the compliance binder for a mid-sized cardiology practice in Texas. The office manager was proud of it — three inches thick, color-coded

Carl B. Johnson · Sep 13, 2026

HIPAA Compliant Texting

HIPAA Compliant Texting with Patients: A 2026 Guide

A dermatology practice in the Midwest thought they were doing patients a favor. Front desk staff texted appointment reminders, lab results, and even photos of

Carl B. Johnson · Sep 13, 2026