HIPAA Compliance
Who Must Comply to HIPAA: Every Entity Explained
A mental health counselor in private practice once told me she didn't need to worry about HIPAA because she wasn't a
Tag
PHI Protection
A collection of 303 posts
OSHA and Healthcare
OSHA and Healthcare: Where Worker Safety Meets HIPAA
The Inspection That Exposed Two Problems at Once A clinic in the Midwest got an OSHA inspection after a needlestick injury went unreported. The compliance
HIPAA History
How Long Has HIPAA Been Around? A 30-Year History
In August 1996, President Bill Clinton signed a law that most people in healthcare couldn't even pronounce correctly. Thirty years later, that same
Business Associate HIPAA Compliance
Business Associate HIPAA Compliance: What 2026 Demands
In 2018, a medical billing company called Advanced Care Hospitalists paid $500,000 to settle with OCR after a business associate it hired gained access
American Health Training HIPAA
American Health Training HIPAA: What Actually Works
A 22-employee cardiology practice in Tennessee paid $2.3 million to settle HIPAA violations in 2020 — and the root cause wasn't a sophisticated
HIPAA Cloud Security
Security Measures for PHI in Cloud-Based Therapy Apps
A Therapist's Worst Nightmare Started With a Default Password In 2022, a mid-sized behavioral health practice in the Southeast discovered that session notes
Certification for HIPAA
Certification for HIPAA: What Actually Matters in 2026
Here's something that surprises most people in healthcare: HHS does not issue or endorse any official certification for HIPAA. There's no
Covered Entity
A Covered Entity Is: Who HIPAA Actually Applies To
Last year I got a call from the owner of a medical billing company in Ohio. She'd just received a letter from the
HIPAA Compliance Plans
HIPAA Compliance Plans: Build One That Actually Works
A pediatric clinic in Idaho had a binder on the shelf labeled "HIPAA Compliance Plan." It was printed in 2017, never updated, and
HIPAA Compliant Checklist
HIPAA Compliant Checklist: What You Actually Need in 2026
The Spreadsheet That Cost a Health System $5.1 Million In 2017, Memorial Healthcare System paid $5.1 million to HHS after employees accessed the
OCR HIPAA
OCR HIPAA Enforcement: What's Changed and What It Means
A single unencrypted laptop stolen from a parked car cost Concentra Health Services $1,725,220. The laptop contained patient names, dates of birth, Social
Business Associates
Examples of Business Associates HIPAA: Who Counts?
The Vendor That Cost a Health System $4.3 Million In 2016, Advocate Health Care agreed to pay $5.55 million to HHS after multiple