Expert guidance on HIPAA compliance, healthcare technology, and building a culture of compliance.
Expert articles on HIPAA compliance for telehealth, cloud computing, mobile devices, and remote workforce security in healthcare settings. As healthcare delivery models evolve, these articles address the compliance implications of new technologies and workflows.
7 min read
Is Zoom HIPAA compliant? Only on paid plans with a signed BAA. Learn which plans qualify, how to request the BAA, required settings, and the mistakes that put practices at risk.
12 min read
Does your practice website need to be HIPAA compliant? Learn which features trigger HIPAA requirements and what to fix right now.
11 min read
A HIPAA gap analysis compares your current compliance posture against Privacy Rule, Security Rule, and Breach Notification Rule requirements. For small practices, it is where compliance stops being abstract and starts getting specific.
11 min read
Compliancy Group and One Guy Consulting both offer HIPAA gap analysis. Compliancy Group pairs self-audits with a coach who creates your remediation plans. One Guy Consulting builds the gap analysis and plan from your SRA automatically. Here is how they compare.
15 min read
Most recurring HIPAA tasks can be automated, like training reminders, policy review scheduling, BAA tracking, and incident logs. Risk analysis, breach decisions, and policy tailoring still need a person. Here is what to automate, what not to, and how to roll it out in phases.
12 min read
HIPAA only applies if you are a covered entity. Here's how 45 CFR 160.103 defines one, who qualifies, and what OCR does when organizations get it wrong.
17 min read
Your NPP is the single document every patient receives. Get it wrong and OCR has a case before a breach even occurs.
11 min read
In May 2024, a cyberattack on Okanogan Behavioral HealthCare exposed files with patient names, Social Security numbers, medical information, and diagnoses. OBHC mailed breach letters to 15,774 Washington residents. A class action settlement is open for claims until December 1, 2026. Here is what we know.
20 min read
A plain-English guide to all three HIPAA safeguard categories, administrative, physical, and technical, with CFR citations, real-world examples, and practical implementation steps for covered entities and business associates.
Plain-language definitions of the terms that appear throughout the blog, each tied to the regulation it comes from.
Walk through your current program with an experienced compliance consultant. Get an honest assessment and a clearer path forward.