HIPAA Law
HIPAA Law: What Every Covered Entity Must Know in 2026
A Single Fax Machine Cost This Hospital $4.8 Million In 2019, a fax sent to the wrong number exposed 498 patients' protected health
Tag
ePHI Security
A collection of 90 posts
Protected Health Information
Protected Health Information Under HIPAA: What Counts
A Receptionist's Casual Comment Cost a Hospital $4.3 Million In 2019, the University of Rochester Medical Center agreed to pay $3 million
HIPAA Laws Privacy
HIPAA Laws Privacy: What Actually Gets Enforced
A dermatology practice in Massachusetts left a voicemail on a patient's home phone, confirming a diagnosis in front of the patient's
HIPAA Certified Cloud
HIPAA Certified Cloud: What That Label Really Means
There's No Such Thing as a HIPAA Certified Cloud — And That's the Problem Last year, a health tech startup told me
HIPAA Importance
HIPAA Importance: Why It Matters More in 2026
A Single Fax Machine Cost One Health System $4.3 Million In 2023, Banner Health agreed to a $1.25 million settlement with the Office
Health Privacy Certification
Health Privacy Certification: What It Means in 2026
A radiology group in Tennessee paid $3.5 million to HHS after a single unauthorized disclosure of patient records. The root cause wasn't
Minimum Necessary Rule
Minimum Necessary Rule for HIPAA: A Practical Guide
A hospital employee in Texas pulled up the medical records of 4,000 patients she had no clinical reason to access. She was checking on
HIPAA Compliance
Examples of HIPAA Compliance Standards of Use in 2026
A Receptionist, a Sticky Note, and a $1.5 Million Fine A front-desk employee at a medical clinic wrote down a patient's Social
HITECH Act
HITECH Act Explained: What It Means for HIPAA in 2026
A $4.3 Million Wake-Up Call Nobody Expected In 2016, Advocate Medical Group settled with the Office for Civil Rights for $5.55 million after
HIPAA Compliance
HIPAA Compliance Healthcare: What Actually Gets You Fined
A banner health system in Arizona lost track of 3.7 million patient records in a single breach. The result: a $1.25 million settlement
HIPAA Compliance
HIPAA Compliant Meaning: What It Really Takes
A dermatology practice in Massachusetts thought they were HIPAA compliant. They had a privacy policy on their website, a shredder in the back office, and
PHI
PHI Patient Data: What Counts and What Gets You Fined
A hospital employee in Texas looked up her ex-husband's medical records on a slow Tuesday afternoon. No clinical reason. No authorization. Just curiosity.