HIPAA History
When Did HIPAA Take Effect? Key Dates You Must Know
A Law Signed in 1996 That Didn't Really Bite Until Years Later Here's a question I get surprisingly often from compliance
Tag
HIPAA Security Rule
Content about HIPAA Security Rule safeguards and workforce training.
HIPAA Login
HIPAA Login Requirements: Secure Access to ePHI
One Shared Password Cost This Hospital $2.14 Million In 2018, a hospital employee used a colleague's login to access patient records for
ePHI
What Is ePHI? The Digital Data That Costs Millions
A Single Unencrypted Laptop Changed Everything In 2017, a stolen laptop cost Lifespan Health System Affiliated Covered Entity (ACE) a $1,040,000 settlement with
HIPAA Administrative Safeguards
How Many Administrative Areas Apply to HIPAA Regulations?
A single missing risk assessment cost Premera Blue Cross $6.85 million in 2020. Not a breach of millions of records — though that happened too.
HIPAA IT Risk Assessment
HIPAA IT Risk Assessment: What Most Orgs Get Wrong
The One Document OCR Asks For First — Every Single Time I've been involved in over a hundred HIPAA readiness reviews. And I can
Parts of HIPAA
Parts of HIPAA: A Practical Guide to Every Title
Most People Only Know Two of the Five Parts of HIPAA I was running a compliance workshop for a mid-size hospital system last year when
HIPAA Rules and Regulations
HIPAA Rules and Regulations: What Actually Matters
A hospital employee in South Carolina pulls up her ex-husband's medical record to see if he really went to that appointment he mentioned.
Technical Safeguards HIPAA
Technical Safeguards HIPAA: What Most Orgs Get Wrong
In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3 million appeal after OCR found that unencrypted laptops and thumb drives
HIPAA Security Rule
The HIPAA Security Rule Applies to Which of the Following?
A community hospital in Yakima, Washington lost an unencrypted laptop in 2013. That single device held the electronic protected health information of 524 patients. The
HIPAA Training
HIPAA Employee Training Requirements: What OCR Expects
In 2024, OCR settled with a healthcare provider for $40,000 after an investigation revealed that multiple workforce members had never received HIPAA training — despite
HIPAA in a Nutshell
HIPAA in a Nutshell: What Every Healthcare Org Must Know
In 2023 alone, OCR settled or imposed civil money penalties in cases totaling over $4 million — and the majority involved failures that any organization with
HIPAA Compliance
HIPAA in Health Care: What Every Organization Must Know
In February 2024, OCR announced a $4.75 million settlement with a hospital system that failed to conduct an enterprise-wide risk analysis — a requirement that