PHI Access Controls

Minimum Necessary Standard

Minimum Necessary Standard HIPAA: A Practical Guide

A hospital billing clerk in Texas pulls up a patient's full medical record — psychiatric notes, HIV status, substance abuse history — just to verify

HIPAA Need to Know

HIPAA Need to Know: The Rule That Prevents Most Breaches

A Receptionist, a Curiosity, and a $2.4 Million Problem In 2018, the University of Texas MD Anderson Cancer Center lost its appeal of a

Minimum Necessary Standard

The Minimum Necessary Standard Means To Limit PHI Access

In 2023, OCR settled with a covered entity for over $100,000 after an investigation revealed that employees were routinely accessing patient records unrelated to

HIPAA Need to Know

HIPAA Need to Know: The Minimum Necessary Standard

In 2023, OCR settled with a health system for $1.3 million after an investigation revealed that employees across multiple departments had unrestricted access to