HIPAA Compliance Insights

HIPAA Goals

HIPAA Goals: The Core Objectives Your Organization Must Meet

In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over

Carl B. Johnson · Oct 2, 2025

HIPAA Health

HIPAA Health: How Compliance Protects Patient Care

In February 2024, OCR announced a $4.75 million settlement with a nonprofit health system that failed to conduct an enterprise-wide risk analysis — a failure

Carl B. Johnson · Sep 30, 2025

HIPAA Identifiable Information

HIPAA Identifiable Information: What Qualifies as PHI

In 2023, a dental practice in New England received a six-figure penalty from OCR after posting appointment reminders on a public-facing scheduling platform that exposed

Carl B. Johnson · Sep 30, 2025

HIPAA Importance

HIPAA Importance: Why Compliance Is Non-Negotiable

In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over

Carl B. Johnson · Sep 30, 2025

HIPAA in a Nutshell

HIPAA in a Nutshell: What Every Healthcare Org Must Know

In 2023 alone, OCR settled or imposed civil money penalties in cases totaling over $4 million — and the majority involved failures that any organization with

Carl B. Johnson · Sep 30, 2025

HIPAA Compliance

HIPAA in Health Care: What Every Organization Must Know

In February 2024, OCR announced a $4.75 million settlement with a hospital system that failed to conduct an enterprise-wide risk analysis — a requirement that

Carl B. Johnson · Sep 30, 2025

HIPAA Basics

HIPAA Is Also Referred to as the Kennedy-Kassebaum Act

When OCR issues a corrective action plan or levies a six-figure penalty, the enforcement letter doesn't reference some obscure regulation — it cites the

Carl B. Johnson · Sep 30, 2025

HIPAA IT Support

HIPAA IT Support: What Your Tech Team Must Get Right

In 2023, OCR settled with a healthcare system for $1.3 million after an investigation revealed that a single misconfigured server — one that the IT

Carl B. Johnson · Sep 30, 2025

HIPAA Law California

HIPAA Law California: What Healthcare Orgs Must Know

When HIPAA Law California Compliance Gets Complicated In 2023, a mid-sized California medical group discovered the hard way that complying with federal HIPAA rules wasn&

Carl B. Johnson · Sep 30, 2025

HIPAA Compliance

The HIPAA List: Every Requirement Your Organization Must Meet

In February 2024, OCR settled with a small dental practice for $70,000 — not because of a massive data breach, but because the practice couldn&

Carl B. Johnson · Sep 30, 2025

HIPAA Log Retention

HIPAA Log Retention: What Your Organization Must Keep

When OCR investigated a midsize hospital system in 2023, investigators didn't just ask about the breach itself — they asked for six years of

Carl B. Johnson · Sep 30, 2025

HIPAA Mandate

HIPAA Mandate: What Your Organization Must Do Now

In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over

Carl B. Johnson · Sep 29, 2025