PHI PII Data
PHI PII Data: What Healthcare Workers Must Know
A hospital billing clerk copies a spreadsheet of patient names, Social Security numbers, and diagnosis codes onto a USB drive to finish work at home.
Tag
HIPAA Training
HIPAA compliance training resources and best practices for healthcare professionals
HIPAA Start Date
HIPAA Start Date: Key Dates Every Covered Entity Must Know
August 21, 1996 — The Day Most People Get Wrong Ask a room full of compliance officers about the HIPAA start date, and you'll
HIPAA Importance
HIPAA Importance: Why It Matters More in 2026
A Single Fax Machine Cost One Health System $4.3 Million In 2023, Banner Health agreed to a $1.25 million settlement with the Office
HIPAA Document Retention
HIPAA Document Retention Requirements Explained
A Filing Cabinet Almost Cost This Clinic $150,000 A few years ago, I consulted with a small orthopedic clinic in the Midwest that had
HIPAA Basics
HIPAA Is the Acronym For: What It Means in 2026
It's the Most Misspelled Acronym in Healthcare — And Most People Get the Meaning Wrong Too I once sat in a compliance meeting where
HIPAA Compliance
What Information Can Be Shared Without Violating HIPAA
Not Everything Is a Violation — But Most People Don't Know Where the Line Is A nurse at a mid-size hospital once told me
ePHI
Which of the Following Is Not Electronic PHI?
I was reviewing a dental practice's risk analysis last year when the office manager pointed at a paper chart and asked, "This
HIPAA Rules
3 Rules of HIPAA: What Every Covered Entity Must Know
In 2018, a Texas cancer center paid $4.3 million to HHS after two unencrypted devices containing ePHI went missing. The root cause wasn'
HIPAA Privacy Rule
HIPAA Privacy Rule Applies to Which of the Following?
A therapist in private practice once told me she didn't think HIPAA applied to her because she wasn't a hospital. A
PHI
HIPAA: What Is PHI and Why It Costs Millions
A nurse at a small dermatology practice in Connecticut posted a selfie on Instagram. In the background, a patient's intake form sat on
Technical Safeguards
Technical Safeguards Are Your First Line of ePHI Defense
A $4.3 Million Penalty Started With One Missing Safeguard In 2016, the University of Texas MD Anderson Cancer Center lost three unencrypted devices containing
HIPAA Privacy Rule
Which Is Not Considered an Identifier Under the Privacy Rule
A Lab Director's $100,000 Mistake Over a Spreadsheet Column A lab director at a mid-size hospital once told me she'd