HIPAA Basics
HIPAA Basics for Providers: What You Must Know in 2026
A small cardiology practice in Oklahoma didn't think twice about faxing patient records to the wrong number. It happened once. Then twice. Then
Tag
Covered Entity Requirements
A collection of 39 posts
HIPAA Privacy Form
HIPAA Privacy Form: What It Must Include in 2026
A woman walked into a dermatology clinic in Phoenix, checked in at the front desk, and was handed a clipboard with a single sheet of
HIPAA Covered Entities
What Are HIPAA Covered Entities? A Real-World Guide
A small dental practice in Indiana received a $12,000 penalty from the Office for Civil Rights in 2019. The owner told investigators he didn&
HIPAA Form
HIPAA Form Requirements: What You Actually Need
A physician's office in Connecticut handed every new patient a single sheet of paper labeled "HIPAA Form" at the front desk.
HIPAA History
When Did HIPAA Take Effect? Key Dates You Must Know
A Law Signed in 1996 That Didn't Really Bite Until Years Later Here's a question I get surprisingly often from compliance
HIPAA Disclosure Form
HIPAA Disclosure Form: What You Must Get Right in 2026
A hospital in Texas faxed 277 patient records to the wrong physician's office. No authorization on file. No tracking log. No documentation that
HIPAA NPP
HIPAA NPP: The Notice Your Patients Deserve Right
That Clipboard Form Nobody Reads Could Cost You Six Figures Here's a scene I've witnessed dozens of times: a patient walks
PHI HIPAA Meaning
PHI HIPAA Meaning: What Counts as Protected Data
A $4.3 Million Mistake Started with One Misunderstood Spreadsheet In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop and
HIPAA Certification Test
HIPAA Certification Test: What It Is and Why It Matters
I once watched a practice manager spend three hours searching for a "federally recognized HIPAA certification test" — convinced that HHS issued some kind
HIPAA Risk Assessment Services
HIPAA Risk Assessment Services: What Actually Works
A dermatology practice in New England paid a vendor $4,000 for a "comprehensive HIPAA risk assessment." What they got back was a
HIPAA Telehealth
HIPAA Telehealth Guidance: What HHS OCR Expects in 2026
The Enforcement Hammer Dropped — and Telehealth Was in the Crosshairs In March 2023, HHS OCR announced that the telehealth enforcement discretion period — the pandemic-era flexibility
PHI Release Form
PHI Release Form: What Your Practice Gets Wrong
A Missing Checkbox Cost This Hospital $387,000 In 2019, Bayfront Health St. Petersburg agreed to a $85,000 corrective action settlement with OCR after