PHI Data
PHI Data: What Counts, What Doesn't, and What Gets You Fined
A Spreadsheet That Cost $6.85 Million In 2018, Premera Blue Cross agreed to pay $6.85 million to the Office for Civil Rights after
Tag
ePHI Security
A collection of 69 posts
HIPAA Basics
HIPAA Protects a Category of Information Called PHI
A therapist in a small group practice mentioned a patient's diagnosis during a casual hallway conversation with the front desk staff. No chart
HIPAA Compliance G Suite
HIPAA Compliance G Suite: What You Must Configure
A behavioral health practice in the Midwest thought they were covered. They'd signed Google's Business Associate Agreement, upgraded to Google Workspace
HIPAA Law
HIPAA Law: What Every Covered Entity Must Know in 2026
A Single Fax Machine Cost This Hospital $4.8 Million In 2019, a fax sent to the wrong number exposed 498 patients' protected health
Protected Health Information
Protected Health Information Under HIPAA: What Counts
A Receptionist's Casual Comment Cost a Hospital $4.3 Million In 2019, the University of Rochester Medical Center agreed to pay $3 million
HIPAA Laws Privacy
HIPAA Laws Privacy: What Actually Gets Enforced
A dermatology practice in Massachusetts left a voicemail on a patient's home phone, confirming a diagnosis in front of the patient's
HIPAA Certified Cloud
HIPAA Certified Cloud: What That Label Really Means
There's No Such Thing as a HIPAA Certified Cloud — And That's the Problem Last year, a health tech startup told me
HIPAA Importance
HIPAA Importance: Why It Matters More in 2026
A Single Fax Machine Cost One Health System $4.3 Million In 2023, Banner Health agreed to a $1.25 million settlement with the Office
Health Privacy Certification
Health Privacy Certification: What It Means in 2026
A radiology group in Tennessee paid $3.5 million to HHS after a single unauthorized disclosure of patient records. The root cause wasn't
Minimum Necessary Rule
Minimum Necessary Rule for HIPAA: A Practical Guide
A hospital employee in Texas pulled up the medical records of 4,000 patients she had no clinical reason to access. She was checking on
HIPAA Compliance
Examples of HIPAA Compliance Standards of Use in 2026
A Receptionist, a Sticky Note, and a $1.5 Million Fine A front-desk employee at a medical clinic wrote down a patient's Social
HITECH Act
HITECH Act Explained: What It Means for HIPAA in 2026
A $4.3 Million Wake-Up Call Nobody Expected In 2016, Advocate Medical Group settled with the Office for Civil Rights for $5.55 million after