Expert guidance on HIPAA compliance, healthcare technology, and building a culture of compliance.
Expert guidance on HIPAA physical safeguards, workforce sanctions, contingency planning, and compliance documentation for small healthcare practices. These articles address the operational side of compliance that many organizations struggle with after completing their initial risk assessment.
5 min read
PT clinics treat six patients in one room and call it a gym. HIPAA allows that if you have reasonable safeguards in place. Here are four simple ones to put in writing.
5 min read
Patients invoke confidentiality. Staff invoke HIPAA. They are usually pointing at the wrong rulebook. The three layers, untangled in plain English.
6 min read
A subpoena is not a skeleton key. What a judge-signed order gets, what an attorney subpoena needs before you can comply, and what to do when police ask at the desk.
5 min read
HIPAA does not ban working from home. The same safeguards apply at home as in the office. Start with a written policy, encrypted devices, and no shared family computer.
6 min read
Fire, ransomware, a dead server, a cloud outage. The Security Rule requires a written plan for all of it. Three of its five parts are marked Required for everyone.
7 min read
OCR has an enforcement initiative aimed at one thing: practices that sit on records requests. The 30-day clock, the fee rules, and the short list of legal denials.
6 min read
A release form filled out incompletely is invalid under 45 CFR 164.508(b)(2), and you cannot honor it. The six elements, the three required statements, and a free template.
5 min read
If you treat substance use disorders, HIPAA is only half your privacy rulebook. Who counts as a Part 2 program, what consent requires, and what changed in 2024.
5 min read
A widow calls asking for her late husband's chart. What the front desk can say, what requires executor papers, and how long the file stays protected.
Plain-language definitions of the terms that appear throughout the blog, each tied to the regulation it comes from.
Walk through your current program with an experienced compliance consultant. Get an honest assessment and a clearer path forward.