HIPAA Basics

The risks of HIPAA audits vary dramatically from organization to organization depending on health data you store, what other organizations you work with, and what steps you have taken to guard this information.

When PHI is found in an electronic form, like a computer or a digital file, it is called electronic Protected Health Information or ePHI. But it doesn't stop there.

Due to the value of the PHI that these Covered Entities and their business Associates use, store and transmit, it is critical that each organization have contingency plans in the event of a emergency.

Text messaging can be HIPAA compliant, it all depends on what information is sent, what consent has been given, and what encryption is used over that information. Read on to learn how you can use a common form of communication without committing a HIPAA violation.

HIPAA Technical Safeguards are designed to help reduce the risks to your organization and the information you store or transmit. Read on to learn more about how these can help your organization safeguard PHI.

Anyone that keeps an eye on the HIPAA violation settlements would be able to see the clear trend over the past year - the Right of Access Initiative. Here, we’ll walk through everything you need to know about component of HIPAA and how the OCR has been following through on that in 2019 and 2020. 

HIPAA is a vast piece of legislation and requires that employees must be trained. But what are the HIPAA training requirements?

An easy step that organizations can take to safeguard PHI data (and just about any digital tool they use) is strong passwords. But what does HIPAA have to say about passwords?

A Business Associate Agreement, or Business Associate Contract, is a written contract that specifies each party’s responsibilities when it comes to PHI. But who needs them, what should go in them, and when do you need to sign one? Read on to find out.

An important step in the process of protecting PHI is ensuring that your organization has adopted proper security procedures when it come to the usage of transmitting health information via email.

HIPAA is all about safeguarding PHI. But what is Protected Health Information? What Isn't PHI? Why is PHI so valuable to hackers? In this post, we'll answer your questions.

Who is a business associate? Who isn’t a HIPAA associate? Our article will answer these questions and more.

HIPAA is a vast regulation. We’ve broken down the core rules that you need to know and live by in order to be considered HIPAA Compliant.

Covered Entity? Business Associates? The HIPAA regulation is full of unusual language. Here we break down what is and what isn't a covered Entity.

Learn how the HIPAA Omnibus Final Rule modified the Privacy Rule, Security Rule, Enforcement Rule and Breach Notification Rule.

The Breach Notification Rule lays out everything you need to know about what a breach is, who needs to notified that one happened and what penalties there are for violations.

Whether you call it HIPAA on steroids or just another expansion, the HITECH Act gave organizations tougher security requirements as well as backs it up with increased penalties for HIPAA noncompliance.

The HIPAA Privacy Rule was the second rule to expand and clarify the scope of HIPAA. It established standards to protect PHI and as originally applied to Covered Entities.