A collection of 353 posts
A pharmaceutical company wires $47,000 to a cardiologist for consulting fees. A device manufacturer flies a surgeon to a resort conference and picks up
A dermatology practice in Massachusetts left a voicemail on a patient's home phone, confirming a diagnosis in front of the patient's
August 21, 1996 — The Day Most People Get Wrong Ask a room full of compliance officers about the HIPAA start date, and you'll
There's No Such Thing as a HIPAA Certified Cloud — And That's the Problem Last year, a health tech startup told me
A Single Fax Machine Cost One Health System $4.3 Million In 2023, Banner Health agreed to a $1.25 million settlement with the Office
It's the Most Misspelled Acronym in Healthcare — And Most People Get the Meaning Wrong Too I once sat in a compliance meeting where
In 2018, a Texas cancer center paid $4.3 million to HHS after two unencrypted devices containing ePHI went missing. The root cause wasn'
A therapist in private practice once told me she didn't think HIPAA applied to her because she wasn't a hospital. A
The Phone Call That Starts With "We're From the Government" A medical practice in Texas gets two letters in the same
A radiology group in Tennessee paid $3.5 million to HHS after a single unauthorized disclosure of patient records. The root cause wasn't
A dermatology practice in New England paid $150,000 to the Office for Civil Rights because a single employee left a spreadsheet of patient names
I get emails about "hipa certification" at least twice a week. Sometimes it's spelled "hippa," sometimes "hipa,"
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.