PHI
PHI Protected Health Information: What Counts and What Doesn't
A front-desk employee at a pediatric clinic in Texas mentioned a patient's diagnosis to the child's school counselor over the phone.
Tag
HIPAA Compliance
HIPAA regulations, compliance requirements, and violation prevention
HIPAA Privacy and Security Rules
HIPAA Privacy and Security Rules: What Actually Gets Enforced
A $4.75 Million Wake-Up Call Nobody Expected In 2022, a single stolen laptop cost a health system millions. Not because the laptop was valuable
PHI and HIPAA
PHI and HIPAA: What Every Healthcare Worker Must Know
A front-desk employee at a small cardiology practice in Arizona forwarded a patient's lab results to the wrong email address. One mistake. One
HIPAA Training Materials
HIPAA Training Materials: What Actually Works in 2026
A cardiologist's office in New York paid $100,000 to settle with OCR after a single employee left PHI visible on a computer
HIPAA Policy
Sample HIPAA Policy: What to Include and What to Skip
That 47-Page Policy Binder Gathering Dust on Your Shelf? OCR Doesn't Care About It Either. I once reviewed a sample HIPAA policy packet
HIPAA Compliance
HIIPA Compliant? Fix the Spelling, Then Fix Your Program
You Searched "HIIPA Compliant" — Here's Why That Matters More Than You Think I see it in emails from clinic managers, in
HIPAA Violations
Consequences of Violating HIPAA: What Actually Happens
A nurse in Tennessee pulls up her ex-husband's medical records out of curiosity. She doesn't share them. She doesn't
HIPAA Basics
Does HIPAA Apply to Private Individuals? The Truth
A woman in Ohio once called the HHS Office for Civil Rights to file a complaint against her neighbor. The neighbor, she claimed, had told
HHS OCR Enforcement
HHS OCR HIPAA Enforcement News: What 2026 Means for You
A $4.75 Million Wake-Up Call That Most Providers Slept Through In February 2024, Montefiore Medical Center in New York agreed to a $4.75
HITECH Act
HITECH Act: What It Actually Means for HIPAA in 2026
A Single Law Turned HIPAA From a Suggestion Into a Sledgehammer In February 2009, most healthcare organizations treated HIPAA like a dusty policy binder on
HIPAA Three Rules
HIPAA Three Rules: What Every Covered Entity Must Know
A small dermatology practice in Massachusetts lost an unencrypted thumb drive in 2019. It contained the ePHI of 2,200 patients. When HHS investigated, they
Cloud HIPAA
Cloud HIPAA Compliance: What You Must Get Right
A major health system migrated its entire patient scheduling platform to the cloud in 2022. They picked a well-known vendor. They assumed the vendor "