PHI
What Is PHI Under HIPAA? The Real-World Guide
A nurse at a mid-size clinic texted a photo of a patient's intake form to a colleague — just to ask a quick question
Tag
OCR Enforcement
Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
PHI After Death
How Long Is PHI Protected After Death? The 50-Year Rule
A Funeral Home Called Me About a HIPAA Violation A few years ago, I got a call from an administrator at a mid-size hospital system.
HIPAA Online Training
HIPAA Online Training: Why 'Free' Costs More Than You Think
The Google Search That Preceded a $2.3 Million Penalty Somewhere in a small cardiology practice in 2018, an office manager typed "HIPAA online
PHI
What Is Considered PHI Information Under HIPAA?
A hospital employee in Texas once posted a photo of a whiteboard in a break room. In the background, barely legible, was a patient'
HIPAA Privacy Rule
What Are the Privacy Rules of HIPAA? A Real-World Guide
A hospital receptionist in Texas called a patient's employer to confirm an upcoming surgery date. She thought she was being helpful. That single
HIPAA Retention Requirements
HIPAA Retention Requirements: What You Must Keep and For How Long
The Filing Cabinet That Cost a Practice $150,000 A few years ago, I consulted with a mid-sized orthopedic group that had just moved offices.
PHI
What Is Protected Health Information or PHI?
A therapist in a small group practice mentioned a patient's name and diagnosis to a colleague in a crowded elevator. No chart was
Private Health Information
What Is Considered Private Health Information Under HIPAA
A Patient's Name on a Sign-In Sheet Cost One Practice $125,000 I got a call from a clinic manager who was genuinely
HIPAA Privacy Rule
What Are the Privacy Rules of HIPAA? A Plain Guide
A Single Fax to the Wrong Number Cost One Health System $4.3 Million In 2016, Advocate Health Care Network agreed to a $5.55
Administrative Simplification
The Purpose of Administrative Simplification Is More Than You Think
A Law That Started with Paperwork — and Ended Up Changing Everything In 1996, a hospital billing department might send the same claim to three different
HIPAA Security Rule
The HIPAA Security Rule Applies to Which of the Following?
A medical billing company in Tennessee assumed the HIPAA Security Rule didn't apply to them. They weren't a hospital. They weren&
HIPAA Compliance
HIPAA Compliant Meaning: What It Really Takes
A dermatology practice in Massachusetts thought they were HIPAA compliant. They had a privacy policy on their website, a shredder in the back office, and