HIPAA Three Rules: What Every Covered Entity Must Know
A small dermatology practice in Massachusetts lost an unencrypted thumb drive in 2019. It contained the ePHI of 2,200 patients. When HHS investigated, they
Content about HIPAA Privacy Rule requirements and training.
A small dermatology practice in Massachusetts lost an unencrypted thumb drive in 2019. It contained the ePHI of 2,200 patients. When HHS investigated, they
A Question That Costs Organizations Millions Every Year I got a call last year from a medical billing company owner who was convinced HIPAA didn&
A hospital in Texas released ten years of a patient's psychiatric records to an employer — all because a front-desk employee accepted an authorization
A patient walks into your front office and asks for a list of everyone you've shared their medical records with over the past
A hospital compliance officer once told me she spent three months building an elaborate minimum necessary policy — role-based access matrices, tiered authorization levels, the works.
A Single Provision That Changed American Healthcare Forever In 1996, a bill signed into law quietly rewired how every hospital, insurer, and physician practice in
August 21, 1996 — The Day Most People Get Wrong Ask a room full of compliance officers about the HIPAA start date, and you'll
Not Everything Is a Violation — But Most People Don't Know Where the Line Is A nurse at a mid-size hospital once told me
A therapist in private practice once told me she didn't think HIPAA applied to her because she wasn't a hospital. A
A Lab Director's $100,000 Mistake Over a Spreadsheet Column A lab director at a mid-size hospital once told me she'd
A woman in California walked into her new dermatologist's office and discovered something unsettling. Her previous provider — a physician she'd left
The Conversation a Patient Overheard in Your Waiting Room A patient sits in your waiting room. She hears the receptionist confirm an appointment for another
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.