HIPAA Privacy Form
HIPAA Privacy Form: What It Must Include in 2026
A Stack of Unsigned Forms Doesn't Mean You're Compliant I walked into a pediatric clinic last year and asked to see
Tag
OCR Enforcement
Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
HIPAA Penalties
What Is the Penalty for a HIPAA Violation in 2026?
In 2018, a small Texas health system called MD Anderson Cancer Center lost three unencrypted devices containing patient records. The result? A $4.3 million
HIPAA Authorizations
HIPAA Authorizations: What Most Covered Entities Get Wrong
A hospital in Texas released ten years of a patient's psychiatric records to an employer — all because a front-desk employee accepted an authorization
HIPAA Compliance
HIPAA Compliance Requirements for Telehealth Apps
A Telehealth Startup's $1.5 Million Wake-Up Call In 2023, a mental health telehealth company called Cerebral agreed to a $7.1 million
HIPAA and AI
HIPAA and AI: What Covered Entities Must Know in 2026
A hospital in the Midwest fed three years of patient discharge summaries into a generative AI tool last year. The goal was noble — predict readmission
HIPAA Compliance
Who Is Responsible for Implementing HIPAA Regulations?
In 2018, a small Texas health plan paid $100,000 to settle HIPAA violations after a breach involving fewer than 500 individuals. The organization'
HIPAA Disclosure Accounting
Under HIPAA a Disclosure Accounting Is Required: What to Know
A patient walks into your front office and asks for a list of everyone you've shared their medical records with over the past
HIPAA Release Form
HIPPA Release Form: What You Actually Need to Know
Every single week, someone walks into a clinic, a law office, or an HR department and asks for a "hippa release form." I&
HIPAA Policy
HIPPA Policy or HIPAA Policy? What You Actually Need
You're Spelling It Wrong — And That's the Least of Your Problems Every week, thousands of people search for "hippa policy.
Minimum Necessary Rule
When Does the Minimum Necessary Rule Not Apply?
A hospital compliance officer once told me she spent three months building an elaborate minimum necessary policy — role-based access matrices, tiered authorization levels, the works.
HIPAA Cloud Security
HIPAA Cloud Security: What You're Getting Wrong
A $4.75 Million Cloud Assumption In 2020, a health system executive told me their patient data was "totally secure" because they'
HIPAA Covered Entities
Who Is Covered Under the HIPAA Rules? A Clear Guide
A solo chiropractor in New England assumed HIPAA didn't apply to her practice. She had fewer than ten employees, no electronic health records