PHI
PHI Protected Health Information: What Counts and What Doesn't
A front-desk employee at a pediatric clinic in Texas mentioned a patient's diagnosis to the child's school counselor over the phone.
Tag
Workforce Training
Healthcare workforce HIPAA training strategies and solutions
PHI and HIPAA
PHI and HIPAA: What Every Healthcare Worker Must Know
A front-desk employee at a small cardiology practice in Arizona forwarded a patient's lab results to the wrong email address. One mistake. One
HIPAA Training Materials
HIPAA Training Materials: What Actually Works in 2026
A cardiologist's office in New York paid $100,000 to settle with OCR after a single employee left PHI visible on a computer
OSHA Compliance Certification
OSHA Compliance Certification and HIPAA: What You Need
The Exam Room Where Two Federal Agencies Collided A medical assistant in a Texas urgent care clinic stuck herself with a contaminated needle in 2023.
PHI
Which of the Following Items Does Not Contain PHI?
A medical assistant at a cardiology practice in Texas forwarded a spreadsheet to her personal email so she could "finish some work at home.
HIPAA Enforcement
Who Oversees HIPAA? The Enforcers You Need to Know
A small clinic in Texas thought nobody was watching. They stored patient records on an unencrypted laptop, never trained their staff, and assumed their size
HIPAA Penalties
What Is the Penalty for a HIPAA Violation in 2026?
In 2018, a small Texas health system called MD Anderson Cancer Center lost three unencrypted devices containing patient records. The result? A $4.3 million
HIPAA and OSHA Certification Online
HIPAA and OSHA Certification Online: What Actually Counts
Last year, a medical office manager in Ohio told me she'd purchased a bundled "HIPAA and OSHA certification online" package for
Violations of HIPAA
Violations of HIPAA: Real Cases and Real Costs
A Receptionist, a Celebrity, and a $4.3 Million Fine In 2019, the University of Rochester Medical Center paid $3 million to settle with OCR
Minimum Necessary Rule
When Does the Minimum Necessary Rule Not Apply?
A hospital compliance officer once told me she spent three months building an elaborate minimum necessary policy — role-based access matrices, tiered authorization levels, the works.
HIPAA Violation Cases
Recent Real Life HIPAA Violation Cases to Study
A hospital employee in Louisiana looked up her ex-husband's medical records out of curiosity. A health plan in Massachusetts left the PHI of
HIPAA Covered Entities
Who Is Covered Under the HIPAA Rules? A Clear Guide
A solo chiropractor in New England assumed HIPAA didn't apply to her practice. She had fewer than ten employees, no electronic health records