Compliance Insights & Guidance

Practical articles on HIPAA rules, HITRUST certification, enforcement, and healthcare data protection.

All Teams3 Compliance Officers36 Business Associate Compliance Teams25 IT Security Leads18 Privacy Officers17 Healthcare IT Professionals12 HITRUST Assessors and Consultants9 Life-Sciences Regulatory Affairs Teams7 Covered Entity Leaders6

Topics:All3 Breach Notification64 Regulatory Framework41 OCR Enforcement & Penalties10 De-identification & PHI Types5 Individual Rights4 Administrative Safeguards3 Governance & Workforce2 HITRUST CSF & Scoring1

3 articles in IT Security Leads · De-identification & PHI Types · Clear filtersSort byNewest·Trending

De-identification & PHI Types

Latest

4 min read

Genetic Data Breach Hits 2.8M Records

Baylor Genetics reported a cybersecurity incident to the Office for Civil Rights (OCR) on August 19, 2026, affecting the Electronic Protected Health Information (ePHI) of 2,810,878 individuals. The cl

For IT Security LeadsRead article

Access Controls Under the Security Rule: A Reference for Engineers

De-identification & PHI Types

5 min read

Access Controls Under the Security Rule: A Reference for Engineers

Scope of This Guide This guide focuses on the technical implementation of access controls required by the HIPAA Security Rule (45 CFR §164.308(a)(4) and §164.312(a)(1)). It s designed for security eng

For IT Security LeadsRead

De-identification & PHI Types

5 min read

Why Isn't My MFA Stopping Breaches?

Context: Questions from the Security Team Huddle During weekly security reviews, incident post-mortems, and budget planning sessions, IT security leads often face a gap between deployed measures and a

For IT Security LeadsRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now