Expert guidance on HIPAA compliance, healthcare technology, and building a culture of compliance.
Continue exploring our HIPAA compliance library with expert articles on Security Rule implementation, risk assessments, and healthcare cybersecurity. One Guy Consulting publishes in-depth guides, compliance checklists, and practical advice for covered entities and business associates navigating HIPAA requirements.
4 min read
Acadia Healthcare's 2026 breach began when an attacker tricked their way into one employee's email and SharePoint account. It exposed data on 1,807 people. Here is what went wrong and what practices can learn.
9 min read
Former employees who keep their system access are a common HIPAA gap. Learn how to build a termination checklist that protects your practice.
20 min read
On March 27, 2026, threat group TeamPCP compromised the Telnyx Python SDK on PyPI in a three-stage supply chain attack. This article examines the HIPAA compliance gaps the attack exposed and what healthcare organizations must do to assess risk, manage vendor relationships, and meet breach notification obligations.
13 min read
HIPAA lists 18 identifiers that link health information to a person. Most healthcare staff do not know what they are. Here is why that matters when your team uses AI tools.
16 min read
ChatGPT is not HIPAA compliant by default. What healthcare teams need to know about BAAs, PHI in prompts, and building an AI acceptable use policy.
12 min read
HIPAA names no form for the risk analysis. What a usable template captures, where the free HHS tool fits, and when a template stops being enough.
9 min read
HIPAA compliance guide for dental offices. Covers dental-specific PHI, common violations, imaging security, and practical steps.
15 min read
Third-party HIPAA compliance badges may expose your organization to tracking violations. Learn how redirect chains and ad pixels create hidden risks.
8 min read
Vercel disclosed a security incident on April 19, 2026 tied to a compromised OAuth chain. What is confirmed and what businesses should do.
Plain-language definitions of the terms that appear throughout the blog, each tied to the regulation it comes from.
Walk through your current program with an experienced compliance consultant. Get an honest assessment and a clearer path forward.