PHI Identifiers
Which Is Not Considered a PHI Identifier Under HIPAA
A Single Data Point Tripped a $1.5 Million Settlement In 2018, a health plan called Anthem paid $16 million to the Office for Civil
Tag
Covered Entity Obligations
A collection of 8 posts
Business Associate Agreement
Business Associate Agreement Form: What You Need
A Missing Signature Cost One Health System $4.3 Million In 2016, Advocate Health Care Network agreed to pay $5.55 million to settle multiple
Cloud HIPAA
Cloud HIPAA Compliance: What You Must Get Right
A major health system migrated its entire patient scheduling platform to the cloud in 2022. They picked a well-known vendor. They assumed the vendor "
HIPAA Patients Rights
HIPAA Patients Rights: What Your Practice Owes Every Person Who Walks In
A Woman in Texas Waited 13 Months for Her Own Medical Records She asked politely. Then she asked again. Then she filed a complaint with
HIPAA Security Rule
Who Is Responsible for Enforcing HIPAA Security Rule?
In February 2023, Banner Health paid $1.25 million to settle allegations that it failed to conduct an enterprise-wide risk analysis — a core requirement of
California Confidentiality of Medical Information Act
California Confidentiality of Medical Information Act Guide
A $4,350 Fine Per Patient Record — And That's Just the State Penalty A few years ago, I worked with a behavioral health
Patient Privacy Rights
Patient Privacy Rights: What Your Practice Gets Wrong
A Mother Couldn't Get Her Own Son's Medical Records — Then the Feds Got Involved In 2019, a small medical practice in
Business Associate
Business Associate HIPAA Compliance: What CEs Must Enforce
In June 2023, OCR settled with a business associate — a medical records management company — for $75,000 after a breach exposed the protected health information