Expert guidance on HIPAA compliance, healthcare technology, and building a culture of compliance.
On March 27, 2026, threat group TeamPCP compromised the Telnyx Python SDK on PyPI in a three-stage supply chain attack. This article examines the HIPAA compliance gaps the attack exposed and what healthcare organizations must do to assess risk, manage vendor relationships, and meet breach notification obligations.
How the Telnyx Supply Chain Attack Exposes HIPAA Compliance Gaps
111 articles published
7 min read
How to identify, document, assess, and respond to HIPAA security incidents. Covers breach determination, notification timelines, and building an effective incident management system.
6 min read
Intuit does not sign Business Associate Agreements for QuickBooks Online. Learn when billing data becomes PHI and what healthcare practices should use instead.
6 min read
Calendly does not sign Business Associate Agreements on any plan. Healthcare practices cannot use it for patient scheduling that involves protected health information.
6 min read
Meta does not sign Business Associate Agreements for WhatsApp. The app lacks audit logs, admin controls, and data retention needed for HIPAA compliance.
5 min read
Apple does not sign Business Associate Agreements for iCloud, making it non-compliant for PHI. This covers iCloud Drive, Mail, iMessage, FaceTime, and backups.
6 min read
Is Gmail HIPAA compliant? Only through paid Google Workspace with a BAA. Free @gmail.com accounts are never compliant. Learn required settings and common email mistakes.
6 min read
Is Dropbox HIPAA compliant? Only on paid team plans with a signed BAA. Learn which plans qualify, required settings, common mistakes, and how Dropbox compares to Google Drive.
5 min read
Is Slack HIPAA compliant? Only on Enterprise Grid. Slack Pro and Business+ do not qualify. Learn the restrictions, costs, and better alternatives for healthcare practices.
4 min read
Is Microsoft Teams HIPAA compliant? Yes, on eligible Microsoft 365 plans with automatic BAA coverage. Learn which plans qualify, required settings, and common mistakes.