Expert guidance on HIPAA compliance, healthcare technology, and building a culture of compliance.
Continue exploring our HIPAA compliance library with expert articles on Security Rule implementation, risk assessments, and healthcare cybersecurity. One Guy Consulting publishes in-depth guides, compliance checklists, and practical advice for covered entities and business associates navigating HIPAA requirements.
17 min read
HIPAA encryption is addressable, but that does not mean optional. Here is what OCR expects for stored data, sent data and email. We also cover what the proposed update would change.
9 min read
An Illinois addiction treatment center paid OCR $103K. After a phishing breach, OCR found it had not done an accurate and thorough risk analysis. Here's what Part 2 enforcement means for your practice.
16 min read
192.7 million people affected. $3.09 billion in costs. One year after the largest healthcare breach in US history, here's what changed, and what didn't.
12 min read
At least 710 large healthcare breaches were reported in 2025. Attackers keep hitting smaller targets and vendors. Here is what the data says and how to protect your practice.
20 min read
HHS lists 24 HIPAA enforcement actions dated 2025. A missing risk analysis showed up again and again. Here's who paid and how to avoid the same mistakes.
11 min read
HHS raised HIPAA penalty amounts about 2.6% on January 28, 2026. See the exact new fines by tier, what triggers each level, and how to stay out of the top tiers.
17 min read
MFA is in the proposed HIPAA Security Rule update. What it costs, which app to pick, and why to roll it out at your practice this week.
17 min read
The biggest proposed HIPAA Security Rule update since 2013: MFA, encryption, and yearly compliance audits. Here is what would change if it becomes final, and when.
13 min read
The Feb 2026 UMMC ransomware attack closed all 35 clinics and canceled elective procedures across Mississippi. Here is what every healthcare practice needs to learn.
Plain-language definitions of the terms that appear throughout the blog, each tied to the regulation it comes from.
Walk through your current program with an experienced compliance consultant. Get an honest assessment and a clearer path forward.