Blog
-
What Is a HIPAA Violation?
When Would Our Organization Be Investigated? Quick answer: A HIPAA violation is any failure by a covered entity or business associate to comply with the…
-
MIPS Security Risk Analysis 2026: The New Risk Management Attestation
Your 2026 MIPS Attestation Now Covers Risk Management, Not Just Risk Analysis Did you know CMS requires a security risk analysis for MIPS? Under the…
-
OCR and ONC Just Updated the Free SRA Tool; Here’s Why That Doesn’t Solve Your Risk Analysis Problem
Quick answer: On September 10, 2026, OCR and ONC released version 3.7 of the Security Risk Assessment (SRA) Tool, adding new content on remote access,…
-
What OCR Told Us at the 2026 HIPAA Security Conference: Enforcement, Risk Analysis, and Policy Gaps
Quick answer: At the OCR/NIST “Safeguarding Health Information” conference held September 2 to 3, 2026, in Gaithersburg, Maryland, HHS’s Office for Civil Rights delivered a…
-
Why Syncing Data to the Cloud Isn’t a Valid HIPAA Ransomware Strategy
by
in
If your practice or business relies on continuous cloud sync or daily cloud snapshots as your primary disaster recovery strategy, your ePHI is far more…
-
Does Having an MSP Mean Your Practice Is HIPAA Compliant? Not on Its Own
Quick answer: No, and this is one of the most common and most understandable misconceptions in healthcare compliance. A skilled managed service provider, or MSP,…
-
Why HIPAA Is Still Confusing After Thirty Years, Especially for Small and Midsize Providers
Quick answer: HIPAA has been federal law since 1996, yet small and midsize providers still get tripped up by it, and the reason is rarely…
-
5 HIPAA Compliance Gaps That Put Healthcare Organizations at Risk
HIPAA compliance gaps often develop quietly through outdated documentation, incomplete risk reviews, and inconsistent staff practices. This post outlines five common areas of exposure and…
-
Does Billing Medicaid Make Schools HIPAA Covered?
Schools Are Billing Medicaid for Behavioral Health Services — Does That Make Your District a HIPAA Covered Entity?
-
HIPAA Security Rule Delay: Why You’re Not Off the Hook
Quick answer: HHS has pushed its target for finalizing the HIPAA Security Rule update from May 2026 to July 2027. But the delay only applies…
