HITECH Act
The HITECH Act: What It Actually Changed About HIPAA
In February 2011, a health plan called Cignet Health of Prince George's County, Maryland received a $4.3 million civil monetary penalty from
Tag
HIPAA Training
HIPAA compliance training resources and best practices for healthcare professionals
HIPAA Compliance
Who Must Comply to HIPAA: Every Entity Explained
A mental health counselor in private practice once told me she didn't need to worry about HIPAA because she wasn't a
HIPAA History
How Long Has HIPAA Been Around? A 30-Year History
In August 1996, President Bill Clinton signed a law that most people in healthcare couldn't even pronounce correctly. Thirty years later, that same
PHI Disclosure
PHI To Third Parties: What HIPAA Actually Allows
A hospital employee in Texas forwarded a patient's lab results to a family member who called and asked nicely. No written authorization. No
Business Associate HIPAA Compliance
Business Associate HIPAA Compliance: What 2026 Demands
In 2018, a medical billing company called Advanced Care Hospitalists paid $500,000 to settle with OCR after a business associate it hired gained access
HIPAA Fines
Fines for Violation of HIPAA: What They Cost in 2026
In February 2023, Banner Health agreed to pay $1.25 million to the Office for Civil Rights after a breach exposed the ePHI of nearly
American Health Training HIPAA
American Health Training HIPAA: What Actually Works
A 22-employee cardiology practice in Tennessee paid $2.3 million to settle HIPAA violations in 2020 — and the root cause wasn't a sophisticated
Certification for HIPAA
Certification for HIPAA: What Actually Matters in 2026
Here's something that surprises most people in healthcare: HHS does not issue or endorse any official certification for HIPAA. There's no
Covered Entity
A Covered Entity Is: Who HIPAA Actually Applies To
Last year I got a call from the owner of a medical billing company in Ohio. She'd just received a letter from the
Administrative Simplification
Administrative Simplification: What HIPAA Really Demands
The Part of HIPAA Nobody Reads — Until It Costs Them In 1996, Congress passed HIPAA with a goal most people have forgotten. It wasn'
HIPAA Compliance Plans
HIPAA Compliance Plans: Build One That Actually Works
A pediatric clinic in Idaho had a binder on the shelf labeled "HIPAA Compliance Plan." It was printed in 2017, never updated, and
HIPAA Permissions
How Many HIPAA Defined Permissions Exist? A Clear Answer
A hospital administrator once told me she thought there were only three reasons you could share patient data: treatment, payment, and "when the lawyers