HIPAA and BAA
HIPAA and BAA: What Your Agreements Must Include
A Missing Signature That Cost $4.3 Million In 2016, the U.S. Department of Health and Human Services settled with Advocate Health Care for
Tag
PHI Protection
A collection of 354 posts
HIPAA Penalties
What Is the Penalty for Violating HIPAA in 2026?
A single stolen laptop cost the University of Texas MD Anderson Cancer Center over $4.3 million in civil monetary penalties. Three unencrypted devices. No
HIPAA Compliant Meaning
HIPAA Compliant Meaning: What It Actually Takes
A small dental practice in Georgia thought they were HIPAA compliant because they had patients sign a privacy form at the front desk. Then OCR
HITECH Act
HITECH Stands For: What It Means for Your Organization
A $4.3 Million Wake-Up Call That Started with Four Letters In 2016, Advocate Health Care Network agreed to pay $5.55 million to settle
HIPAA Privacy Forms
HIPAA Privacy Forms: What Most Practices Get Wrong
The Clipboard That Could Cost You $5.1 Million Picture the scene: a patient walks into your front office, and your receptionist slides a clipboard
HIPAA Risk Assessment
HIPPA Risk Assessment: What You Actually Need to Know
Let me clear something up before we go any further. If you searched for "hippa risk assessment," you're looking for the
HIPAA Training for Employees
HIPAA Training for Employees: What Actually Works
A pediatric dental practice in Indiana lost $350,000 in a single afternoon. Not from a lawsuit. Not from a cyberattack. From a single OCR
Omnibus Rule
The Primary Purpose of the Omnibus Rule Is To
In January 2013, HHS dropped a 563-page regulatory hammer that reshaped every corner of HIPAA compliance. The Omnibus Rule wasn't a minor tweak.
HIPAA Covered Entity
Under HIPAA a Covered Entity Is Defined As: Guide
A home health aide I worked with once told me, "We're too small to be a covered entity." Her agency had
HIPAA Compliance Forms
HIPAA Compliance Forms for Employers: What You Actually Need
A hospital system in New York handed HHS investigators a three-ring binder full of policies during an audit. The binder looked impressive — hundreds of pages,
HIPAA Violations
What Violates HIPAA? Real Cases and Real Fines
A Single Stolen Laptop Cost This Health System $3.9 Million In 2018, the University of Rochester Medical Center (URMC) settled with the Office for
HIPAA Breach Notification Rule
What Is the Purpose of the HIPAA Breach Notification Rule?
In 2017, Presence Health paid $475,000 to the Office for Civil Rights after a single mistake: they waited too long to notify patients about