HIPAA Compliance
Who Must Comply to HIPAA: Every Entity Explained
A mental health counselor in private practice once told me she didn't need to worry about HIPAA because she wasn't a
Tag
Covered Entities
A collection of 112 posts
Administrative Simplification
Administrative Simplification: What HIPAA Really Demands
The Part of HIPAA Nobody Reads — Until It Costs Them In 1996, Congress passed HIPAA with a goal most people have forgotten. It wasn'
Business Associates
Examples of Business Associates HIPAA: Who Counts?
The Vendor That Cost a Health System $4.3 Million In 2016, Advocate Health Care agreed to pay $5.55 million to HHS after multiple
Types of PHI
Types of PHI: What Counts as Protected Health Info
A Receptionist, a Fax Machine, and a $1.5 Million Mistake I once worked with a specialty clinic where a front-desk employee faxed a patient&
HIPAA Privacy Rule
Business Associates Must Comply With HIPAA Privacy Standards
In 2018, a medical records company called Advanced Care Hospitalists paid $500,000 to settle HIPAA violations after a billing services contractor gained access to
HIPAA Law
What's the HIPAA Law? A Plain-English Breakdown
A hospital receptionist in Texas emails a patient's lab results to the wrong address. Within 48 hours, that patient's HIV status
HIPAA Privacy Rule
What Is the Privacy Rule for HIPAA? A Real-World Guide
In 2023, a dermatology practice in Massachusetts paid $150,000 to the Office for Civil Rights after a patient's medical photographs were disclosed
HIPAA Authorization
Authorization of Release of Health Information Rules
A hospital in Texas released three years of a patient's psychotherapy notes to an employer — based on a form the patient had signed
Administrative Simplification
Administrative Simplification Section of HIPAA Explained
The Provision That Built Modern Healthcare Compliance In 1996, a senator from Kansas and a senator from Massachusetts got a bill signed into law that
HIPAA Regulations
HIPAA Regulations Are Designed to Protect More Than You Think
A $4.3 Million Wake-Up Call in a Hospital Basement In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted USB drive
HITECH Act
What Is the HIPAA HITECH Act? A Practical Guide
In February 2011, Cignet Health of Prince George's County, Maryland received a $4.3 million penalty from the Office for Civil Rights — the
Patient Identification
Describe 3 Ways You Can Identify a Patient Under HIPAA
A $50 Phone Call That Cost a Hospital Everything A front desk coordinator at a mid-size hospital in the Midwest picked up the phone. The