HIPAA Form
HIPAA Form Requirements: What You Actually Need
A physician's office in Connecticut handed every new patient a single sheet of paper labeled "HIPAA Form" at the front desk.
Tag
Covered Entity Requirements
A collection of 24 posts
HIPAA History
When Did HIPAA Take Effect? Key Dates You Must Know
A Law Signed in 1996 That Didn't Really Bite Until Years Later Here's a question I get surprisingly often from compliance
HIPAA Disclosure Form
HIPAA Disclosure Form: What You Must Get Right in 2026
A hospital in Texas faxed 277 patient records to the wrong physician's office. No authorization on file. No tracking log. No documentation that
HIPAA NPP
HIPAA NPP: The Notice Your Patients Deserve Right
That Clipboard Form Nobody Reads Could Cost You Six Figures Here's a scene I've witnessed dozens of times: a patient walks
PHI HIPAA Meaning
PHI HIPAA Meaning: What Counts as Protected Data
A $4.3 Million Mistake Started with One Misunderstood Spreadsheet In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop and
HIPAA Certification Test
HIPAA Certification Test: What It Is and Why It Matters
I once watched a practice manager spend three hours searching for a "federally recognized HIPAA certification test" — convinced that HHS issued some kind
HIPAA Risk Assessment Services
HIPAA Risk Assessment Services: What Actually Works
A dermatology practice in New England paid a vendor $4,000 for a "comprehensive HIPAA risk assessment." What they got back was a
HIPAA Telehealth
HIPAA Telehealth Guidance: What HHS OCR Expects in 2026
The Enforcement Hammer Dropped — and Telehealth Was in the Crosshairs In March 2023, HHS OCR announced that the telehealth enforcement discretion period — the pandemic-era flexibility
PHI Release Form
PHI Release Form: What Your Practice Gets Wrong
A Missing Checkbox Cost This Hospital $387,000 In 2019, Bayfront Health St. Petersburg agreed to a $85,000 corrective action settlement with OCR after
Total HIPAA Compliance
Total HIPAA Compliance: What It Actually Takes in 2026
A small cardiology practice in Tennessee thought they were compliant. They had a privacy notice taped to the front desk. Their EHR vendor told them
Covered Entity vs Business Associate
Covered Entity vs Business Associate: Key Differences
A few years ago, I got a call from the CEO of a mid-sized billing company. His team had been processing claims for a hospital
HIPAA Authorization
HIPAA Authorization: What Counts, What Doesn't
A psychiatrist's office in Connecticut faxed 65 pages of therapy notes to a patient's employer. The patient had signed a form