Practical articles on HIPAA rules, HITRUST certification, enforcement, and healthcare data protection.
Breach NotificationQuestions about OCR s enforcement are flooding in from assessors working with smaller covered entities and business associates. The pattern is clear: OCR s enforcement strategy has shifted. The old fo
Regulatory FrameworkA whistleblower report lands in your compliance inbox. You have 120 days to investigate, decide whether to self-disclose to the Department of Justice (DOJ) , and document every step. This is the opera
Regulatory FrameworkYou ve opened the email or certified letter from the Office for Civil Rights (OCR) , and your stomach drops. An investigation has been opened. What you do in the next 72 hours will determine whether t
Breach NotificationWhen DAP Health faced a class action lawsuit after a cyberattack exposed the Protected Health Information (PHI) of 129,048 individuals, the resulting $1.3 million settlement didn t just reflect the br
Get weekly security insights and compliance updates delivered to your inbox.
Regulatory FrameworkThe Challenge New Vision Dental faced a common issue: negative patient reviews that needed addressing. A team member responded publicly, revealing patients full names and details not mentioned by the
Regulatory FrameworkCompliance officers are hearing the same refrain from every vendor, consultant, and conference keynote: AI is reshaping security faster than you can update your policies. That s partly true. But the m
Breach NotificationWhen Tift Regional Health System notified 180,142 patients about a data breach in August 2023, the attack had happened nearly a year earlier. That delay became a core allegation in the class action la
Individual RightsThe Question at Hand When a patient requests their medical records, your team has 30 days to deliver. Miss that deadline, and you re in OCR s crosshairs. Azul Vision just learned this the hard way, pa
Breach NotificationDAP Health s $1.3 million settlement following a 2024 email server breach affecting 129,048 individuals highlights a harsh reality for nonprofit healthcare organizations: breach response costs often f
Regulatory FrameworkYour marketing team wants to launch a patient engagement campaign. Your IT lead is worried about encryption. Your privacy officer is asking whether you need authorization. And someone from billing jus
Breach NotificationCentral Maine Healthcare agreed to a $1,368,025 settlement in July 2026 to resolve class action claims from a 2025 data breach . The healthcare system detected unusual network activity on June 1, 2025
Breach NotificationWhen Medical Management Resource Group LLC reached a $1.75 million settlement in August 2026 for a breach affecting over 2.35 million individuals, it revealed more than just financial penalties. It ex
