Types of PHI
Types of PHI: What Counts as Protected Health Info
A Receptionist, a Fax Machine, and a $1.5 Million Mistake I once worked with a specialty clinic where a front-desk employee faxed a patient&
Tag
HIPAA Training
HIPAA compliance training resources and best practices for healthcare professionals
HIPAA Privacy Rule
Business Associates Must Comply With HIPAA Privacy Standards
In 2018, a medical records company called Advanced Care Hospitalists paid $500,000 to settle HIPAA violations after a billing services contractor gained access to
HIPAA Security Certification
HIPAA Security Certification: What It Really Gets You
A compliance officer at a midsize cardiology practice once told me she'd spent $4,200 on a "HIPAA security certification" for
HIPAA Training
HIPAA Training for Employees: What You Actually Get
A medical practice in New York thought they'd saved money by pulling together a makeshift HIPAA training for employees from scattered online resources
HIPAA Forms
HIPAA Form Basics Every Covered Entity Needs in 2026
Last year, a small orthopedic clinic in Virginia got a letter from HHS. Not the good kind. An investigation revealed they'd been using
HIPAA Privacy Rule
What Is the Privacy Rule for HIPAA? A Real-World Guide
In 2023, a dermatology practice in Massachusetts paid $150,000 to the Office for Civil Rights after a patient's medical photographs were disclosed
Poor Communication in Healthcare
Poor Communication in Healthcare Examples That Led to HIPAA Fines
A nurse at a large hospital system picks up the phone and reads a patient's HIV status to the wrong family member. No
HIPAA Basics
HIPAA Basics for Providers: What You Must Know in 2026
A small cardiology practice in Oklahoma didn't think twice about faxing patient records to the wrong number. It happened once. Then twice. Then
Administrative Simplification
Administrative Simplification Section of HIPAA Explained
The Provision That Built Modern Healthcare Compliance In 1996, a senator from Kansas and a senator from Massachusetts got a bill signed into law that
HITECH Act
What Is the HIPAA HITECH Act? A Practical Guide
In February 2011, Cignet Health of Prince George's County, Maryland received a $4.3 million penalty from the Office for Civil Rights — the
Business Associate
Which of These Entities Could Be a Business Associate?
A managed IT company in Tennessee gets hit with a $2.3 million settlement from HHS because a hospital never signed a business associate agreement
HIPAA Enforcement
In What Year Did HIPAA Become Enforceable? The Real Timeline
A hospital in Phoenix gets slapped with a $1.7 million penalty for failing to protect patient records. The year is 2023. But rewind two