ePHI
Which of the Following Is Not Electronic PHI?
I was reviewing a dental practice's risk analysis last year when the office manager pointed at a paper chart and asked, "This
Tag
HIPAA Compliance
HIPAA regulations, compliance requirements, and violation prevention
HIPAA Rules
3 Rules of HIPAA: What Every Covered Entity Must Know
In 2018, a Texas cancer center paid $4.3 million to HHS after two unencrypted devices containing ePHI went missing. The root cause wasn'
HIPAA Privacy Rule
HIPAA Privacy Rule Applies to Which of the Following?
A therapist in private practice once told me she didn't think HIPAA applied to her because she wasn't a hospital. A
PHI
HIPAA: What Is PHI and Why It Costs Millions
A nurse at a small dermatology practice in Connecticut posted a selfie on Instagram. In the background, a patient's intake form sat on
Technical Safeguards
Technical Safeguards Are Your First Line of ePHI Defense
A $4.3 Million Penalty Started With One Missing Safeguard In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices containing
HIPAA Privacy Rule
Which Is Not Considered an Identifier Under the Privacy Rule
A Lab Director's $100,000 Mistake Over a Spreadsheet Column A lab director at a mid-size hospital once told me she'd
Incidental Disclosure
Examples of Incidental Disclosure Under HIPAA
The Conversation a Patient Overheard in Your Waiting Room A patient sits in your waiting room. She hears the receptionist confirm an appointment for another
Health Privacy Certification
Health Privacy Certification: What It Means in 2026
A radiology group in Tennessee paid $3.5 million to HHS after a single unauthorized disclosure of patient records. The root cause wasn't
Minimum Necessary Rule
Minimum Necessary Rule for HIPAA: A Practical Guide
A hospital employee in Texas pulled up the medical records of 4,000 patients she had no clinical reason to access. She was checking on
PHI and HIPAA
PHI and HIPAA: What Every Healthcare Worker Must Know
A Single Misrouted Fax Cost This Clinic $125,000 A small physician practice in Tennessee faxed a patient's lab results to a local
HIPAA Laws
What Are HIPAA Laws? A Plain-English Breakdown
A dermatology practice in New England paid $150,000 to the Office for Civil Rights because a single employee left a spreadsheet of patient names
Best Online HIPAA Training
Best Online HIPAA Training: What Actually Works in 2026
A dermatology practice in Massachusetts paid HHS $150,000 because a receptionist handed a patient's printed lab results to the wrong person. The