HIPAA Risk Assessment Services
HIPAA Risk Assessment Services: What Actually Works
A dermatology practice in New England paid a vendor $4,000 for a "comprehensive HIPAA risk assessment." What they got back was a
Tag
OCR Enforcement
Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
HIPAA and Privacy Act Training
HIPAA and Privacy Act Training: What You Must Know
A hospital in Texas fired a records clerk in 2023 after she accessed the medical files of 14 patients she had no clinical reason to
HIPAA Certified
HIPAA Certified: What It Really Means in 2026
Last month, a clinic administrator told me she'd hired a new medical assistant who was "HIPAA certified." She said it with
Fraud Waste and Abuse
Fraud Waste and Abuse in Healthcare: A HIPAA Guide
A $4.7 Billion Problem Hiding in Your Organization's Blind Spots In 2023, the Department of Justice recovered over $2.68 billion in
HIPAA Online Training
HIPAA Online Training: What Actually Works in 2026
A receptionist at a New York medical practice forwarded a patient's lab results to her personal Gmail account so she could "finish
HIPAA Exempt
HIPAA Exempt: Who Actually Qualifies and Who Doesn't
A gym owner in Texas once told me, straight-faced, that his business was HIPAA exempt because he wasn't a doctor. He collected health
HIPAA Basics
What Is Meant by HIPAA? A Practical Guide for 2026
Last year, a solo-practice dermatologist in Connecticut called me in a panic. She'd just received a letter from the Office for Civil Rights
HIPAA and Compliance Training
HIPAA and Compliance Training: What Actually Works
A receptionist at a dermatology clinic in New England forwarded a spreadsheet of 1,800 patient names and insurance IDs to her personal Gmail account.
Privacy Rule
Privacy Rule HIPAA Summary: What You Actually Need to Know
A $4.75 Million Mistake That Started With One Misunderstood Rule In 2022, Memorial Hermann Health System paid a $2.4 million settlement to HHS
ePHI Breach Examples
Which Example Is a Breach of ePHI? Real Cases Explained
A Stolen Laptop. A $1.5 Million Fine. One Unlocked Screen. In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3
HIPAA Sample Policies
HIPAA Sample Policies: What Actually Works in 2026
A 340-bed hospital in Idaho downloaded a set of HIPAA sample policies from the internet in 2019, dropped their logo on each page, and filed
HIPAA IT Risk Assessment
HIPAA IT Risk Assessment: What Most Orgs Get Wrong
The One Document OCR Asks For First — Every Single Time I've been involved in over a hundred HIPAA readiness reviews. And I can