PET CT Report Email Spoofing Incident: Oncology Results Sent to the Wrong Outside Clinics — What Happened and How to Prevent It
Incident Overview. What happened. An attacker impersonated your radiology domain and sent email...
Minnesota Health Records Act (MHRA): Consent Rules for Sharing Mental Health Notes
Overview of MHRA Consent Requirements. The Minnesota Health Records Act (MHRA) sets strict stand...
HIPAA Guide: When a Revenue Cycle Analytics Vendor Needs a BAA vs. a Data Use Agreement
Business Associate Agreement Requirements. A Business Associate Agreement (BAA) is required when...
HIPAA Training for IVF Embryologists: Is Labeling Cryo Tanks with Full Patient Names Overnight Compliant?
Understanding HIPAA Protected Health Information. In IVF labs, any data that can identify a pati...
Risk Assessment for Syncing Smart Infusion Pump Drug Library Updates with Embedded MRNs
Risk Assessment Purpose. The purpose of this risk assessment is to help you evaluate and control...
HIPAA Training for Cardiac Rehab Therapists Logging Exercise Vitals on Shared Gym Tablets Overnight
HIPAA Compliance in Cardiac Rehabilitation. In cardiac rehab, exercise vitals become Protected H...
HIPAA Audit Checklist for Orofacial Pain & TMJ Video Archives: Retention and Access Reviews
Audit Log Content for TMJ Video Archives. Required audit trail elements. Unique user identif...
How to Fix Cochlear Implant Mapping Exports That Send Audiograms to the Wrong School District Inbox
Verifying Recipient Email Addresses. Confirm the intended destination. If audiogram export mess...
Is It HIPAA-Compliant to Post Medication Administration Boards with Full Names in an Adult Day Health Center?
HIPAA Privacy Rule Requirements. Under the HIPAA Privacy Rule, names displayed alongside medicat...
HIPAA Compliance Checklist for a Small Dental Practice with Two Locations
Running a dental practice across two locations adds coordination challenges to HIPAA compliance. ...
Is It HIPAA-Compliant for Rheumatology Infusion Centers to Post Biologic Chair Boards with Full Patient Names?
Short answer: posting full patient names on biologic chair boards can be HIPAA-compliant only whe...
HIPAA Training for Offshore Revenue Cycle Teams: What to Include
Importance of HIPAA Training for Offshore Teams. When revenue cycle work is performed offshore, ...
Ready to simplify HIPAA compliance?
Join thousands of organizations that trust Accountable to manage their compliance needs.
Kevin Henry
CEO @Accountable
As founder and CEO of Accountable, Kevin leads our mission to simplify HIPAA compliance for healthcare organizations. With a background in healthcare technology and healthcare, he has been instrumental in developing innovative solutions that make compliance accessible and manageable for organizations of all sizes.