Healthcare compliance insights on cybersecurity best practices, ePHI protection, access controls, and audit preparation for HIPAA-regulated organizations.
Healthcare compliance insights covering cybersecurity best practices, ePHI protection strategies, access controls, and audit preparation for HIPAA-regulated organizations. These articles reflect current OCR enforcement priorities and real compliance gaps identified across hundreds of assessments.
11 min read
An imaging center holds thousands of studies with the patient's name written into every file. OCR has settled with four imaging entities since 2019. Here is what the rules require.
12 min read
Botox is a prescription drug. The before-and-after photo is a medical record. Whether HIPAA covers either one depends on a question every med spa owner should ask.
16 min read
Pennsylvania has no single health privacy code. It has a breach act with a HIPAA clause, a 2024 Attorney General notice rule, seven-year physician retention, and HIV and drug and alcohol consent rules that a federal authorization form does not satisfy.
15 min read
Georgia mostly follows the federal rules, so its few state additions are easy to miss. They include a 10-year physician record rule, a disposal law, and a breach law aimed at information brokers and data collectors.
10 min read
Anthropic will sign a BAA for Claude, but only on Enterprise, only after a one-way switch is flipped, and only for the features on its covered list.
11 min read
Most disclosures a practice makes every day are exempt from the accounting. The ones that are not are the ones nobody is writing down.
11 min read
The pixel your agency installed is a disclosure the moment it fires on a page that knows who the patient is. Here is the line between analytics and a reportable breach.
12 min read
The patient has died, the family is in the living room, and the volunteer who sat with him for six months wants to post about it. HIPAA has an opinion on all three.
12 min read
The chart rides in a tote bag, the tablet lives in a car, and the patient's daughter is standing in the kitchen. HIPAA applies to every bit of it.
Plain-language definitions of the terms that appear throughout the blog, each tied to the regulation it comes from.
Walk through your current program with an experienced compliance consultant. Get an honest assessment and a clearer path forward.