What Is PHI Under HIPAA? The Real-World Guide
A nurse at a mid-size clinic texted a photo of a patient's intake form to a colleague — just to ask a quick question
A collection of 266 posts
A nurse at a mid-size clinic texted a photo of a patient's intake form to a colleague — just to ask a quick question
A Funeral Home Called Me About a HIPAA Violation A few years ago, I got a call from an administrator at a mid-size hospital system.
A front-desk employee at a small cardiology practice in Texas emailed a spreadsheet of patient names, diagnoses, and Social Security numbers to her personal Gmail
A hospital employee in Texas once posted a photo of a whiteboard in a break room. In the background, barely legible, was a patient'
A therapist in a small group practice mentioned a patient's name and diagnosis to a colleague in a crowded elevator. No chart was
A Patient's Name on a Sign-In Sheet Cost One Practice $125,000 I got a call from a clinic manager who was genuinely
A hospital employee in Texas forwarded a patient's appointment confirmation to a personal email so she could "follow up from home."
A hospital employee in Texas looked up her ex-husband's medical records on a slow Tuesday afternoon. No clinical reason. No authorization. Just curiosity.
In January 2021, something shifted in HIPAA enforcement that most compliance officers still haven't fully absorbed. Congress passed the HITECH Amendment — Public Law
A dermatology practice in New England thought appointment reminder postcards were harmless. They listed the patient's name, the date of their next visit,
A surgeon's scheduling whiteboard in a busy hallway. A screenshot of a patient portal texted between nurses. A spreadsheet of lab results emailed
A pediatric clinic in Texas thought they were fully covered. They had general liability, malpractice, even an umbrella policy. Then a stolen laptop exposed the
Join healthcare organizations that trust HIPAA Certify for their workforce training and compliance tracking.