Blog
-
OCR and ONC Just Updated the Free SRA Tool; Here’s Why That Doesn’t Solve Your Risk Analysis Problem
Quick answer: On September 10, 2026, OCR and ONC released version 3.7 of the Security Risk Assessment (SRA) Tool, adding new content on remote access, telework,…
-
MIPS Security Risk Analysis 2026: The New Risk Management Attestation
Your 2026 MIPS Attestation Now Covers Risk Management, Not Just Risk Analysis Did you know CMS requires a security risk analysis for MIPS? Under the…
-
What Is a HIPAA Violation?
When Would Our Organization Be Investigated? Quick answer: A HIPAA violation is any failure by a covered entity or business associate to comply with the HIPAA…
-
When Are NEMT Organizations HIPAA Business Associates?
Non-Emergency Medical Transportation (NEMT) providers serve a critical role in helping patients access healthcare services. However, one of the most common compliance questions in the…
-
What Are HIPAA Workforce Training Requirements?
Under federal regulation 45 C.F.R. § 164.530(b)(1), all HIPAA Covered Entities and Business Associates are legally required to provide security and privacy training to every…
-
How to Properly Dispose of PHI and ePHI Under HIPAA Regulations
Healthcare organizations and business associates handle massive amounts of Protected Health Information (PHI) daily. However, managing data securely doesn’t stop while it is in use—it…
-
HIPAA Compliance: Timely Medical Records Access
As a healthcare provider or business associate, you likely spend a massive amount of energy protecting patient data from unauthorized eyes. But are you equally…
-
Does HIPAA Apply to Dental Practices? What You Must Know
A dangerous misconception persists within the oral healthcare community: many dental practices believe they are flying beneath the regulatory radar of federal investigators. Because dental…
-
Does HIPAA Prohibit the Use of Patient Sign-In Sheets?
A common misconception among medical practices, dental clinics, and physical therapy centers is that the HIPAA Privacy Rule completely outlaws physical or digital patient sign-in…
