HIPAA Compliance Consultant: Chuck Weiselberg, CHP

Chuck Weiselberg is a Certified HIPAA Professional (CHP) and the founder of One Guy Consulting. He has spent nearly a decade working exclusively in HIPAA compliance as a Subject Matter Expert (SME), with sixteen years of experience in client success roles across healthcare technology.

Before starting One Guy Consulting, Chuck served as the founding Director of Customer Success at Compliancy Group, where he wrote their original compliance plans, playbooks, and customer success department. He has personally conducted approximately 23,000 meetings with over 3,500 unique healthcare organizations, helping each one build and maintain a HIPAA compliance program. Not one of those organizations has received an OCR fine or been required to complete a corrective action plan.

One Guy Consulting offers full-scope HIPAA compliance help for small healthcare practices and business associates. Every service aligns with specific requirements under 45 CFR Part 164:

Everything is included in one flat annual rate. No per-user fees. No per-module charges. No surprise add-ons. The Self-Guided plan starts at $675 per year and the Full-Scope plan with dedicated 1:1 consulting starts at $1,300 per year. See full pricing details.

If you are researching HIPAA compliance options for a small practice, you have likely come across Compliancy Group. Here is how the two compare — and why it matters if you want hands-on consulting instead of software.

Chuck Weiselberg was the founding Director of Customer Success at Compliancy Group when the company was four people in a small office. He wrote their original compliance plans, playbooks, and customer success department. He knows both approaches from the inside.

The core difference: Compliancy Group is a software platform with coaching support. One Guy Consulting is a consulting service where the person who built the system is the same person who walks you through it. For a small practice that wants hands-on HIPAA help rather than navigating software independently, a consulting-led approach is typically the better fit.

If your small medical practice needs HIPAA compliance set up from scratch — whether you are a new practice or you have been operating without a formal compliance program — here is what the process looks like with One Guy Consulting:

1. Discovery call (Day 1): Chuck reviews your practice size, specialty, PHI workflows, and current compliance status during a free 30-minute call. No obligation.
2. Gap analysis (Days 1-7): Assess current safeguards against HIPAA Privacy Rule (45 CFR Part 164, Subpart E) and Security Rule (Subpart C) requirements. Identify what exists and what is missing.
3. Security Risk Assessment (Days 7-21): Conduct the SRA required under §164.308(a)(1)(ii)(A). Identify threats and vulnerabilities to all electronic PHI your practice creates, receives, maintains, or transmits.
4. Policy development (Days 21-45): Draft or customize policies and procedures per §164.316(a). Policies are tailored to your practice's specific workflows, not generic templates.
5. Workforce training (Days 30-50): Deliver training to all workforce members with PHI access per §164.308(a)(5)(i). Six modules covering HIPAA fundamentals, cybersecurity, and compliance attestation.
6. BAA execution (Days 45-60): Identify all vendors that create, receive, maintain, or transmit PHI. Execute Business Associate Agreements per §164.502(e) and §164.308(b)(1).
7. Incident response setup (Days 50-70): Establish breach notification and incident management procedures per §164.404(b), including risk assessment protocols and notification timelines.
8. Evidence packaging (Days 60-75): Organize all compliance documentation for the §164.530(j) six-year retention requirement. This is the documentation you would present during an OCR audit or investigation.
9. Annual sustainment (Ongoing): Annual risk assessment reviews, policy updates when workflows change, refresher training, and ongoing BAA management.

Most HIPAA compliance platforms are built for hospital systems and large health plans. One Guy Consulting is built for the 4-person dental office, the solo behavioral health provider, and the multi-location therapy practice where the office manager just got handed HIPAA compliance on top of everything else they already do. See pricing for both plans.