HIPAA

HHS-OCR settled four ransomware cases for $1.1M all tied to missing annual risk analyses. Are your safeguards up to date?

A long-awaited HIPAA Security Rule update could arrive this month, and medical practices should start preparing now.

What covered entities need to know about valid authorizations, common defects and protecting patient privacy.

What practices need to know about "vishing" — the phone-based scam putting patient data and HIPAA compliance at risk.

95% of practices say regulatory burden has grown over the past three years, according to MGMA's 2026 Regulatory Burden Report.

Vanderbilt professor and health care entrepreneur Bruce J. Lynskey breaks down what companies and investors need to know before betting on AI in medicine.

Most physicians think HIPAA compliance is a one-time task. It isn't. Here are the four most common misconceptions.

HHS-OCR ramps up HIPAA enforcement: phishing settlement spotlights risk analyses, Security Rule gaps and urgent 2026 Part 2 NPP updates.

From snooping to sending records to the wrong patient, here are the HIPAA violations medical offices make most and how to prevent them.

Cadia Healthcare Facilities settles allegations it violated HIPAA underscoring the need for strict privacy safeguards and staff training before sharing patient information online.

A Texas court rules in favor of a hospital in a Wiretap Act case, highlighting challenges in privacy lawsuits against healthcare providers.

These five strategies will ensure HIPAA compliance in your medical practice, safeguarding patient information against evolving digital threats.

HHS prioritizes patient-centric healthcare, enhancing interoperability and access to health information while addressing privacy concerns and technology disparities.

Explore the intersection of HIPAA violations and the False Claims Act, highlighting compliance strategies to mitigate legal risks in healthcare.

Understanding HIPAA's Privacy Rule clarifies how incidental disclosures in health care settings are permissible, ensuring patient privacy while facilitating essential communications.

Practice administrators seeking federal grants or contracts must look beyond HIPAA, completing SAM registration and adopting FAR 52.204‑21’s 15 essential cybersecurity controls to safeguard PHI, PII, FCI and CUI.

Two class-action lawsuits targeting the University of Maryland Medical Center and the University of Kansas Health System for years-long cyberstalking and unauthorized access to protected health information spotlight massive HIPAA risk-analysis failures and underscore the urgent need for stronger health care cybersecurity safeguards.

The long anticipated HIPAA Security Rule Notice of Proposed Rule Making strives to strengthen electronic protected health information cybersecurity.

“Cybersecurity is patient safety” and the continued downstream implications for the use of PHI for other unlawful purposes including insurance fraud and predatory practices targeted at minors are significant.

Each practice should learn from the result of this HIPAA case.

Allowing employees to use their own devices at work could raise privacy concerns.

Don't let the summer fun get in the way of protecting patient privacy.

A rebuttal to a 2019 article on HIPAA.

Neglecting insider threats can be equally as costly as ransomware and other cyberattacks.

Your weekly dose of wisdom from the Physicians Practice experts.