HIPAA Covered Entity
Under HIPAA a Covered Entity Is Defined As: Guide
A home health aide I worked with once told me, "We're too small to be a covered entity." Her agency had
Tag
PHI Protection
A collection of 250 posts
HIPAA Compliance Forms
HIPAA Compliance Forms for Employers: What You Actually Need
A hospital system in New York handed HHS investigators a three-ring binder full of policies during an audit. The binder looked impressive — hundreds of pages,
HIPAA Violations
What Violates HIPAA? Real Cases and Real Fines
A Single Stolen Laptop Cost This Health System $3.9 Million In 2018, the University of Rochester Medical Center (URMC) settled with the Office for
HIPAA Breach Notification Rule
What Is the Purpose of the HIPAA Breach Notification Rule?
In 2017, Presence Health paid $475,000 to the Office for Civil Rights after a single mistake: they waited too long to notify patients about
HIPAA Transactional Print
HIPAA Transactional Print: Protect PHI on Paper
The Envelope That Ended Up at the Wrong Address A few years ago, a large health plan outsourced its Explanation of Benefits mailings to a
HIPAA Privacy Form
HIPAA Privacy Form: What Most Practices Get Wrong
That Stack of Forms Your Front Desk Hands Out? It Might Be Wrong. I once walked into a three-provider medical practice in Georgia and asked
HIPAA Training Requirements
HIPAA Training Requirements: What the Law Actually Says
A small pediatric clinic in Colorado thought they had HIPAA handled. They'd trained their staff once — back in 2014. When OCR came knocking
HIPAA Compliance
Who Must Comply to HIPAA: Every Entity Explained
A mental health counselor in private practice once told me she didn't need to worry about HIPAA because she wasn't a
OSHA and Healthcare
OSHA and Healthcare: Where Worker Safety Meets HIPAA
The Inspection That Exposed Two Problems at Once A clinic in the Midwest got an OSHA inspection after a needlestick injury went unreported. The compliance
HIPAA History
How Long Has HIPAA Been Around? A 30-Year History
In August 1996, President Bill Clinton signed a law that most people in healthcare couldn't even pronounce correctly. Thirty years later, that same
Business Associate HIPAA Compliance
Business Associate HIPAA Compliance: What 2026 Demands
In 2018, a medical billing company called Advanced Care Hospitalists paid $500,000 to settle with OCR after a business associate it hired gained access
American Health Training HIPAA
American Health Training HIPAA: What Actually Works
A 22-employee cardiology practice in Tennessee paid $2.3 million to settle HIPAA violations in 2020 — and the root cause wasn't a sophisticated