Expert guidance on HIPAA compliance, healthcare technology, and building a culture of compliance.
Articles covering state privacy law interactions, enforcement case studies, corrective action plans, and the foundational elements of a HIPAA compliance program. These resources help organizations understand how federal HIPAA requirements intersect with state-level privacy and security regulations.
17 min read
PHI, PII, and ePHI are not interchangeable terms. Each has a different legal definition, different regulatory scope, and different compliance obligations. This guide breaks down exactly what each term means, where they overlap, and what your organization needs to do about each one.
18 min read
Learn what electronic Protected Health Information (ePHI) is, see real-world examples, and understand the HIPAA Security Rule requirements that govern how covered entities and business associates must protect it.
14 min read
A HIPAA business associate agreement is a legally required contract before any vendor touches PHI. Here is what it must contain, who needs one, and what happens without one.
6 min read
The COVID grace period is over. Telehealth now faces full HIPAA enforcement. Learn which platforms you can use, how to protect patient data, and what a proposed Security Rule change could mean.
13 min read
Your patients already email you. Which email services sign a BAA, what each costs on its own pricing page, and the settings to turn on.
19 min read
Yes, faxing is still HIPAA compliant in 2026. Traditional fax over phone lines is considered secure, but cloud fax requires a BAA. Learn the rules, common mistakes, and modern alternatives.
17 min read
Received a HIPAA complaint? Do not panic. Follow this step-by-step guide covering internal complaints, OCR investigations, documentation, and how to respond without making things worse.
18 min read
Can you text patients under HIPAA? Standard SMS is not compliant for PHI. Learn what you can and cannot text, patient consent rules, and HIPAA-compliant alternatives.
25 min read
If a laptop, phone, or USB drive with patient data just went missing, follow these HIPAA incident response steps. Covers remote wipe, breach assessment, notification rules, and how to prevent it.
Plain-language definitions of the terms that appear throughout the blog, each tied to the regulation it comes from.
Walk through your current program with an experienced compliance consultant. Get an honest assessment and a clearer path forward.