HIPAA Online Training
HIPAA Online Training: What Actually Works in 2026
A receptionist at a New York medical practice forwarded a patient's lab results to her personal Gmail account so she could "finish
Tag
OCR Enforcement
Office for Civil Rights HIPAA enforcement actions, investigations, and compliance strategies
HIPAA Exempt
HIPAA Exempt: Who Actually Qualifies and Who Doesn't
A gym owner in Texas once told me, straight-faced, that his business was HIPAA exempt because he wasn't a doctor. He collected health
HIPAA Basics
What Is Meant by HIPAA? A Practical Guide for 2026
Last year, a solo-practice dermatologist in Connecticut called me in a panic. She'd just received a letter from the Office for Civil Rights
HIPAA and Compliance Training
HIPAA and Compliance Training: What Actually Works
A receptionist at a dermatology clinic in New England forwarded a spreadsheet of 1,800 patient names and insurance IDs to her personal Gmail account.
Privacy Rule
Privacy Rule HIPAA Summary: What You Actually Need to Know
A $4.75 Million Mistake That Started With One Misunderstood Rule In 2022, Memorial Hermann Health System paid a $2.4 million settlement to HHS
ePHI Breach Examples
Which Example Is a Breach of ePHI? Real Cases Explained
A Stolen Laptop. A $1.5 Million Fine. One Unlocked Screen. In 2018, the University of Texas MD Anderson Cancer Center lost a $4.3
HIPAA Sample Policies
HIPAA Sample Policies: What Actually Works in 2026
A 340-bed hospital in Idaho downloaded a set of HIPAA sample policies from the internet in 2019, dropped their logo on each page, and filed
HIPAA IT Risk Assessment
HIPAA IT Risk Assessment: What Most Orgs Get Wrong
The One Document OCR Asks For First — Every Single Time I've been involved in over a hundred HIPAA readiness reviews. And I can
HIPAA Covered Entity
Which Segments of Your Organization Are Covered Under HIPAA
The Question That Catches Most Compliance Officers Off Guard A hospital system I worked with had 14,000 employees. Their HIPAA training program covered about
Online HIPAA Training
Online HIPAA Training for Employees: What Actually Works
A $4.3 Million Fine That Started with Untrained Staff In 2015, the University of Texas MD Anderson Cancer Center lost three unencrypted devices containing
HIPAA Purposes
What Are the Four Main Purposes of HIPAA? A Guide
Most People Only Know Half the Story Ask ten healthcare workers what HIPAA is about, and nine of them will say "patient privacy."
Protected Health Information
Protected Health Information HIPAA: What Actually Counts
A Receptionist, a Waiting Room, and a $1.5 Million Mistake A few years ago, I consulted with a mid-size behavioral health clinic that had