HIPAA History
When Did HIPAA Become a Law? The Full Timeline
On August 21, 1996, President Bill Clinton picked up a pen and signed a law that most people in healthcare wouldn't feel the
Tag
Security Rule
HIPAA Security Rule requirements and implementation
HIPAA Rules
What Are the Two Main Rules of HIPAA? A Clear Guide
In 2018, a small insurance company called Anthem paid $16 million to the Office for Civil Rights — the largest HIPAA settlement in history at that
HIPAA Security Awareness and Training
HIPAA Security Awareness and Training: What Most Get Wrong
A $4.3 Million Settlement Started with One Untrained Employee In 2016, the University of Texas MD Anderson Cancer Center lost an unencrypted laptop and
HIPAA Rules
What Are the HIPAA Rules? A Plain-English Breakdown
A hospital employee in Texas looks up her ex-husband's medical records after a bitter custody dispute. A small clinic in Georgia stores patient
HIPAA Rules
3 Rules of HIPAA: What Every Covered Entity Must Know
In 2018, a Texas cancer center paid $4.3 million to HHS after two unencrypted devices containing ePHI went missing. The root cause wasn'
Administrative Simplification
Administrative Simplification: What HIPAA Really Demands
The Part of HIPAA Nobody Reads — Until It Costs Them In 1996, Congress passed HIPAA with a goal most people have forgotten. It wasn'
HIPAA Security Certification
HIPAA Security Certification: What It Really Gets You
A compliance officer at a midsize cardiology practice once told me she'd spent $4,200 on a "HIPAA security certification" for
Electronic Health Records
Electronic Health Records HIPAA Compliance in 2026
A single misconfigured EHR user account cost Anthem, Inc. $16 million in 2018 — still the largest HIPAA settlement in history. The breach exposed nearly 79
HIPAA Security Certification
HIPAA Security Certification: What It Really Takes
Last year, a compliance officer at a mid-size hospital system in Texas told me she'd spent $14,000 on a vendor's
HIPAA Rules
What Are the 3 Rules of HIPAA? A Plain-English Guide
A small dermatology practice in Connecticut thought they had HIPAA covered. They had a privacy notice on their website and a shredder in the back
HIPAA Goals
HIPAA Goals: The Core Objectives Your Organization Must Meet
In February 2024, OCR announced a $4.75 million settlement with Montefiore Medical Center after a former employee stole the protected health information of over
HIPAA Compliance
The HIPAA List: Every Requirement Your Organization Must Meet
In February 2024, OCR settled with a small dental practice for $70,000 — not because of a massive data breach, but because the practice couldn&