10 min read
HIPAA Security Rule 2026: 7 Key Changes
The biggest HIPAA Security Rule update since 2013 mandates MFA, encryption, and annual audits. Here is what changes and when you must comply.
Older articles from the One Guy Consulting archive, still useful for policy work, training, and audit prep.
10 min read
The biggest HIPAA Security Rule update since 2013 mandates MFA, encryption, and annual audits. Here is what changes and when you must comply.
8 min read
Every HIPAA breach under 500 people from 2025 must be reported to OCR by March 1, 2026. Here is exactly how to file and what happens if you do not.
8 min read
The Feb 2026 UMMC ransomware attack shut down 35 clinics and canceled surgeries across Mississippi. Here is what every healthcare practice needs to learn.
7 min read
Cloudflare's February 2026 outage knocked 1,100 networks offline for 6 hours. Here's exactly what happened, who was affected, and 5 steps to protect your business from the next major cloud outage.
11 min read
Most compliance vendors quote $10K+. Here is what OCR actually requires from small practices — and how to get compliant without breaking the bank.
13 min read
When a business associate breach hits, the clock starts. Here is your 12-step vendor breach response plan to protect patients and avoid HIPAA fines.
9 min read
OCR Risk Analysis Initiative has fined 10 practices since 2024. Here is the 7-step HIPAA risk assessment process that keeps you off their list.
7 min read
Practices skip 'addressable' HIPAA safeguards thinking they're optional. They're not — and the new Security Rule eliminates the distinction entirely.
12 min read
The 7 BAA mistakes that get practices fined — with real OCR enforcement cases and what the new Security Rule means for your vendor contracts.