Blog
Why HIPAA Is Still Confusing After Thirty Years, Especially for Small and Midsize Providers
Quick answer: HIPAA has been federal law since 1996, yet small and midsize providers still get tripped up by it, and the reason is rarely carelessness. Most owners and office managers never received formal HIPAA training; they inherited assumptions from a prior job, a vendor’s
5 HIPAA Compliance Gaps That Put Healthcare Organizations at Risk
HIPAA compliance gaps often develop quietly through outdated documentation, incomplete risk reviews, and inconsistent staff practices. This post outlines five common areas of exposure and explains how Colington Consulting helps healthcare organizations build more defensible compliance programs.
Does Billing Medicaid Make Schools HIPAA Covered?
Schools Are Billing Medicaid for Behavioral Health Services — Does That Make Your District a HIPAA Covered Entity?
HIPAA Security Rule Delay: Why You’re Not Off the Hook
Quick answer: HHS has pushed its target for finalizing the HIPAA Security Rule update from May 2026 to July 2027. But the delay only applies to the proposed new requirements— the current HIPAA Security Rule is still full…
Is Your HIPAA Compliance Program on Summer Vacation?
Summer is here — and while your staff rotates through PTO, cyber criminals are not. Ransomware gangs, phishing campaigns, and hacking groups operate 365 days a year, and the data confirms they are not taking July off. If…
Is the New HIPAA Security Rule Final Yet?
Is the New HIPAA Security Rule Final Yet? What Covered Entities Need to Know Right Now
