Minimum Necessary Rule
Minimum Necessary Rule for HIPAA: A Practical Guide
A hospital employee in Texas pulled up the medical records of 4,000 patients she had no clinical reason to access. She was checking on
Tag
HIPAA Privacy Rule
Content about HIPAA Privacy Rule requirements and training.
PHI After Death
How Long Is PHI Protected After Death? The 50-Year Rule
A Funeral Home Called Me About a HIPAA Violation A few years ago, I got a call from an administrator at a mid-size hospital system.
HIPAA Privacy Rule
What Are the Privacy Rules of HIPAA? A Real-World Guide
A hospital receptionist in Texas called a patient's employer to confirm an upcoming surgery date. She thought she was being helpful. That single
HIPAA Privacy Rule
What Are the Privacy Rules of HIPAA? A Plain Guide
A Single Fax to the Wrong Number Cost One Health System $4.3 Million In 2016, Advocate Health Care Network agreed to a $5.55
PHI
PHI Includes More Than You Think: A Complete Guide
A hospital employee in Texas forwarded a patient's appointment confirmation to a personal email so she could "follow up from home."
HIPAA Minimum Necessary
HIPAA Minimum Necessary Standard Applies: A Guide
The Phone Call That Cost a Hospital $865,000 A hospital employee picked up the phone, confirmed a patient's full diagnosis to an
HIPAA Verification Requirements
HIPAA Verification Requirements: What You Must Do
A hospital employee in Colorado hands a stack of lab results to a man standing at the front desk. He says he's the
History of HIPAA
History of HIPAA: From 1996 Act to 2026 Enforcement
A Law Nobody Read in 1996 Now Costs Organizations Millions When President Clinton signed the Health Insurance Portability and Accountability Act on August 21, 1996,
HIPAA Patient Identifiers
HIPAA Patient Identifiers: The 18 Data Points That Trigger Compliance
A hospital employee in Texas once looked up her ex-husband's medical records out of curiosity. She didn't change anything. She didn&
The Privacy Rule
The Privacy Rule: What It Actually Requires in 2026
A Receptionist, a Phone Call, and a $1.5 Million Problem A hospital receptionist confirmed a patient's diagnosis to someone who claimed to
HIPAA Permissions
How Many HIPAA Defined Permissions Exist? A Clear Answer
A hospital administrator once told me she thought there were only three reasons you could share patient data: treatment, payment, and "when the lawyers
HIPAA Privacy Rule
Business Associates Must Comply With HIPAA Privacy Standards
In 2018, a medical records company called Advanced Care Hospitalists paid $500,000 to settle HIPAA violations after a billing services contractor gained access to