10 min read
Bloodborne Pathogen Training for Healthcare
Bloodborne pathogen training for healthcare organizations. What OSHA training covers, why it matters, and why OGC does it better.
Archive
HIPAA Compliance Articles: Page 16
Continue exploring our HIPAA compliance library with expert articles on Security Rule implementation, risk assessments, and healthcare cybersecurity. One Guy Consulting publishes in-depth guides, compliance checklists, and practical advice for covered entities and business associates navigating HIPAA requirements.
10 min read
12 min read
Fraud, Waste and Abuse Training for Healthcare Organizations
Fraud, waste and abuse training for healthcare organizations. What FWA training covers, who must complete it, and what makes it work.
22 min read
HIPAA De-Identification Requirements: Safe Harbor & Expert Methods
HIPAA de-identification methods explained: Safe Harbor vs Expert Determination, the 18 identifiers to remove, and common mistakes that leave data identifiable.
11 min read
HIPAA and Social Media: Staff Mistakes to Avoid
HIPAA social media violations come from ordinary posting habits. What healthcare orgs must control and how to build a workable policy.
9 min read
HIPAA Minimum Necessary Rule in Daily Operations
The HIPAA minimum necessary rule says to use, share, or request only the least PHI needed for the job. Learn how it works, where it does not apply, and common mistakes.
10 min read
HIPAA Risk Assessments for Business Associates
Business associates need their own HIPAA risk assessment. What to include, where BAs fail, and how to document a process that holds up.
13 min read
HIPAA Authorization Requirements: Form Elements & Rules (2026)
A HIPAA authorization form needs specific elements under 45 CFR 164.508. What must be included, what invalidates it, and common mistakes.
10 min read
Secureframe vs One Guy Consulting (2026)
Secureframe is a modern compliance automation platform. Considering their services? See how One Guy Consulting compares for small healthcare practices.
10 min read
Dot Compliance vs One Guy Consulting (2026)
Dot Compliance is an enterprise QMS platform. See how One Guy Consulting compares for small healthcare practices.
Key terms
Key HIPAA terms used in these articles
Plain-language definitions of the terms that appear throughout the blog, each tied to the regulation it comes from.
- Protected Health Information (PHI)
- Individually identifiable health information held or transmitted by a covered entity or business associate, in any form or medium. 45 CFR 160.103
- Electronic PHI (ePHI)
- PHI that is created, received, maintained, or transmitted in electronic form. 45 CFR 160.103
- Covered Entity
- A health plan, health care clearinghouse, or health care provider that transmits health information electronically. 45 CFR 160.103
- Business Associate
- A person or company that creates, receives, maintains, or transmits PHI on behalf of a covered entity, such as billing, IT, or cloud vendors. 45 CFR 160.103
- Business Associate Agreement (BAA)
- The written contract HIPAA requires between a covered entity and a business associate. 45 CFR 164.502(e), 164.504(e)
- Security Rule
- The standards for protecting ePHI through administrative, physical, and technical safeguards. 45 CFR Part 164, Subpart C
- Security Risk Assessment (SRA)
- The accurate and thorough risk analysis the Security Rule requires you to conduct and document. 45 CFR 164.308(a)(1)(ii)(A)
- Breach Notification Rule
- After a breach of unsecured PHI, individuals must be notified without unreasonable delay and no later than 60 calendar days after discovery, and HHS must be notified. 45 CFR 164.400 to 164.414