HITECH Act
The HITECH Act: What It Actually Changed About HIPAA
In February 2011, a health plan called Cignet Health of Prince George's County, Maryland received a $4.3 million civil monetary penalty from
Tag
Business Associate Agreements
A collection of 18 posts
PHI Disclosure
PHI To Third Parties: What HIPAA Actually Allows
A hospital employee in Texas forwarded a patient's lab results to a family member who called and asked nicely. No written authorization. No
HIPAA Cloud Security
Security Measures for PHI in Cloud-Based Therapy Apps
A Therapist's Worst Nightmare Started With a Default Password In 2022, a mid-sized behavioral health practice in the Southeast discovered that session notes
HIPAA Compliant Checklist
HIPAA Compliant Checklist: What You Actually Need in 2026
The Spreadsheet That Cost a Health System $5.1 Million In 2017, Memorial Healthcare System paid $5.1 million to HHS after employees accessed the
Business Associates
Examples of Business Associates HIPAA: Who Counts?
The Vendor That Cost a Health System $4.3 Million In 2016, Advocate Health Care agreed to pay $5.55 million to HHS after multiple
HIPAA Omnibus Rule
HIPAA Omnibus Rule: What It Changed and Why It Matters
In January 2013, HHS dropped the largest single regulatory update in HIPAA's history — and most organizations still haven't fully absorbed what
HIPAA Cloud Compliance
HIPAA Cloud Compliance: What Most Orgs Get Wrong
A mid-size pediatric health network migrated to a popular cloud platform in 2022. They configured the servers, encrypted the data at rest, and assumed they
HIPAA Compliance
HIPAA Compliance for Telemedicine Apps in 2026
A therapist in Ohio logs into a video platform, greets her patient, and starts a session about suicidal ideation. The session is encrypted in transit
HIPAA Compliant Online Storage
HIPAA Compliant Online Storage: What You Must Know
A small dermatology practice in New England thought they were covered. They'd signed up for a popular cloud storage service, uploaded thousands of
HIPAA Telehealth
HIPAA Compliance Requirements for Telehealth in 2026
The Zoom Call That Cost a Psychiatrist Everything A solo psychiatrist in New England conducted therapy sessions over a consumer-grade video app for two years.
HIPAA Omnibus Final Rule
HIPAA Omnibus Final Rule: What It Changed and Why It Still Matters
When OCR announced a $4.8 million settlement with New York-Presbyterian Hospital and Columbia University in 2014, the enforcement action underscored a regulatory landscape that
HIPAA Teletherapy
HIPAA Teletherapy Compliance Guidelines for 2025
When OCR settled with a behavioral health provider in 2023 for $125,000 after a therapist conducted sessions over a consumer-grade video platform without a