Expert guidance on HIPAA compliance, healthcare technology, and building a culture of compliance.
HIPAA resources on data backup procedures, facility access controls, device and media controls, and staff security awareness training requirements. These articles help organizations build the operational policies and procedures that auditors and regulators expect to see documented.
6 min read
A small clinic with no Security Risk Assessment and no written HIPAA policies is operating with zero defensible compliance. Here is what that actually means when OCR comes knocking.
8 min read
Small clinic without a HIPAA risk assessment? Here is why you need one and exactly what happens after compliance gaps are found.
10 min read
Google's BAA is accepted in the Admin console. What it covers, what it leaves to the practice, and the settings a small office turns on next.
18 min read
Our process toward becoming HIPAA compliant at One Guy Consulting isn't rocket science but we're happy to explain how it works, step by step.
9 min read
A BAA is a corporate-level compliance contract. A confidentiality agreement is a personal promise. One question tells you which to use.
7 min read
If OCR is investigating you, it already has a reason to think something went wrong. Here is how investigations start, how they get more serious, and what sets the penalty.
7 min read
Most practices think ePHI lives in their EHR. It also lives in emails, scheduling apps, website forms, and mobile devices. Every location needs protection.
10 min read
If your agency handles patient data for a healthcare client (forms, testimonials, ad pixels, CRM records), you're a business associate under HIPAA. Here's what that means and what to do about it.
16 min read
HIPAA's Safe Harbor standard lists 18 identifiers that must be removed before health data counts as de-identified. Here is the complete list with real-world examples and steps to protect each one.
Plain-language definitions of the terms that appear throughout the blog, each tied to the regulation it comes from.
Walk through your current program with an experienced compliance consultant. Get an honest assessment and a clearer path forward.