HIPAA Security Rule
The HIPAA Security Rule's Broader Objectives Explained
In 2018, the University of Texas MD Anderson Cancer Center lost a Supreme Court appeal and got stuck with a $4.3 million penalty — all
Tag
Covered Entity Requirements
A collection of 30 posts
HIPAA Compliance
HIIPA Compliant? Fix the Spelling, Then Fix Your Program
You Searched "HIIPA Compliant" — Here's Why That Matters More Than You Think I see it in emails from clinic managers, in
HHS OCR Enforcement
HHS OCR HIPAA Enforcement News: What 2026 Means for You
A $4.75 Million Wake-Up Call That Most Providers Slept Through In February 2024, Montefiore Medical Center in New York agreed to a $4.75
HIPAA Three Rules
HIPAA Three Rules: What Every Covered Entity Must Know
A small dermatology practice in Massachusetts lost an unencrypted thumb drive in 2019. It contained the ePHI of 2,200 patients. When HHS investigated, they
HIPAA Privacy Form
HIPAA Privacy Form: What It Must Include in 2026
A Stack of Unsigned Forms Doesn't Mean You're Compliant I walked into a pediatric clinic last year and asked to see
HIPAA Disclosure Accounting
Under HIPAA a Disclosure Accounting Is Required: What to Know
A patient walks into your front office and asks for a list of everyone you've shared their medical records with over the past
HIPAA Release Form NJ
HIPAA Release Form NJ: What You Actually Need
A Bergen County Clinic Got This Wrong — and It Cost Them Everything Last year, I consulted with a multi-provider practice in northern New Jersey that
HIPAA Privacy Rule
Which Is Not Considered an Identifier Under the Privacy Rule
A Lab Director's $100,000 Mistake Over a Spreadsheet Column A lab director at a mid-size hospital once told me she'd
Minimum Necessary Rule
Minimum Necessary Rule for HIPAA: A Practical Guide
A hospital employee in Texas pulled up the medical records of 4,000 patients she had no clinical reason to access. She was checking on
Administrative Simplification
The Purpose of Administrative Simplification Is More Than You Think
A Law That Started with Paperwork — and Ended Up Changing Everything In 1996, a hospital billing department might send the same claim to three different
HIPA Regulation
HIPA Regulation: What People Get Wrong and Why It Matters
You Searched for "HIPA Regulation" — Let's Fix That First I see it every single week. Someone types "hipa regulation"
HIPAA and BAA
HIPAA and BAA: What Your Agreements Must Include
A Missing Signature That Cost $4.3 Million In 2016, the U.S. Department of Health and Human Services settled with Advocate Health Care for