Vendor Management

HIPAA Compliance

HIPAA Compliant Cloud Provider: What You Must Verify

In 2022, OCR settled with a health plan for $1.25 million after an investigation revealed that the organization had migrated protected health information to

Subcontractor BAA

Subcontractor BAA: What HIPAA Requires Down the Chain

In 2016, OCR settled with a business associate for $650,000 after a subcontractor experienced a breach affecting over 11,000 patients — and no business