The Privacy Rule
The Privacy Rule: What It Actually Requires in 2026
A Receptionist, a Phone Call, and a $1.5 Million Problem A hospital receptionist confirmed a patient's diagnosis to someone who claimed to
Tag
Covered Entity
A collection of 192 posts
HIPAA Fines
Fines for Violation of HIPAA: What They Cost in 2026
In February 2023, Banner Health agreed to pay $1.25 million to the Office for Civil Rights after a breach exposed the ePHI of nearly
Covered Entity
A Covered Entity Is: Who HIPAA Actually Applies To
Last year I got a call from the owner of a medical billing company in Ohio. She'd just received a letter from the
HIPAA Forms
HIPAA Form Basics Every Covered Entity Needs in 2026
Last year, a small orthopedic clinic in Virginia got a letter from HHS. Not the good kind. An investigation revealed they'd been using
Business Associate
Which of These Entities Could Be a Business Associate?
A managed IT company in Tennessee gets hit with a $2.3 million settlement from HHS because a hospital never signed a business associate agreement
Covered Entity
What Is a Covered Entity Under HIPAA? A Clear Guide
A few years ago, I got a call from the owner of a small billing company in Ohio. She was convinced HIPAA didn't
Business Associate
Business Associate as Defined by HIPAA: What You Must Know
The $4.3 Million Mistake That Started With a Vendor Contract In 2016, Advocate Medical Group paid $5.55 million to settle HIPAA violations — and
Incidental Disclosure
Incidental Disclosure Examples: What Counts Under HIPAA
A patient in the waiting room overhears a nurse call out another patient's name. A fax containing lab results lands on a shared
Employer HIPAA Violations
Employer HIPAA Violations: What Gets Companies Fined
The HR Director Who Shared Too Much Last year, an HR director at a mid-sized manufacturing company forwarded an employee's medical leave documentation
BAA Contract
BAA Contract: What You Must Get Right in 2026
The Missing Signature That Cost a Health System $4.3 Million In 2016, Advocate Health Care Network settled with the Office for Civil Rights (OCR)
Covered Entity
Who Is a Covered Entity Under HIPAA? A Clear Guide
The $4.3 Million Mistake That Started With One Wrong Assumption In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices
Safe Harbor Law
What Is the Safe Harbor Law Under HIPAA?
A Single Missing Step Cost This Health System $4.3 Million In 2023, OCR announced a $4.3 million settlement with Lafourche Medical Group after