HIPAA Need to Know
HIPAA Need to Know: The Rule That Prevents Most Breaches
A Receptionist, a Curiosity, and a $2.4 Million Problem In 2018, the University of Texas MD Anderson Cancer Center lost its appeal of a
Tag
ePHI Security
A collection of 47 posts
HIPAA Training
HIPAA Training for Healthcare Workers: What 2026 Demands
A hospital receptionist in Texas forwarded a patient's lab results to the wrong email address. It took fourteen seconds. The breach affected one
HIPAA Breach
Definition of HIPAA Breach: What Actually Triggers One
A receptionist at a pediatric clinic prints a patient's immunization record and accidentally leaves it on the front counter for forty-five minutes. A
HIPAA Compliance Training Courses
HIPAA Compliance Training Courses: What Actually Works
A pediatric clinic in Colorado lost $548,265 because their front desk staff didn't know that faxing PHI to the wrong number triggered
PHI Meaning
PHI Meaning: What Counts as Protected Health Info
A Single Spreadsheet Cost This Hospital $4.3 Million In 2016, Advocate Health Care agreed to a $5.55 million settlement with OCR after breaches
HIPAA Risk Assessment
Annual HIPAA Risk Assessment: What Most Orgs Get Wrong
A $4.75 Million Wake-Up Call That Started With a Checkbox In 2023, Banner Health paid $1.25 million to settle with OCR after investigators
Electronic Health Records
Electronic Health Records HIPAA Compliance in 2026
A single misconfigured EHR server exposed the protected health information of 3.9 million patients at Advocate Medical Group — and cost the organization $5.55
SMS HIPAA Compliant
SMS HIPAA Compliant: What Your Texts Are Exposing
That Text You Just Sent? It Probably Violated Federal Law A nurse at a mid-size cardiology practice texts the on-call physician: "Mrs. Rivera'
PHI HIPAA Meaning
PHI HIPAA Meaning: What Counts as Protected Data
A $4.3 Million Mistake Started with One Misunderstood Spreadsheet In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop and
HIPAA Compliance
HIPAA Compliance for Telemedicine Apps in 2026
A therapist in Ohio logs into a video platform, greets her patient, and starts a session about suicidal ideation. The session is encrypted in transit
HIPAA Compliance
What HIPAA Compliant Means for Your Organization
A small dermatology practice in Connecticut thought they were HIPAA compliant because they had a privacy notice in the lobby and passwords on their computers.
HIPAA Privacy and Security Training
HIPAA Privacy and Security Training: What Actually Works
A radiology technician at a hospital in New York forwarded a patient's imaging report to her personal Gmail account so she could "