How to Assess HIPAA Risk When Clinicians Use Consumer ChatGPT With De‑Identified Cases
Using consumer ChatGPT on clinical scenarios can be helpful for brainstorming, but it raises spec...
Arizona Genetic Privacy Consent Rules for Employer-Sponsored Wellness Panels: What Employers Need to Know
Arizona Genetic Testing Consent Requirements. If you sponsor a wellness panel that includes gene...
How to Quantify Residual Risk After Enforcing Conditional Access on All Remote EHR Sessions
When you enforce Conditional Access Policies across every remote electronic health record (EHR) s...
How to Evaluate the Risk of Sharing ePHI with a Device Registry Under a HIPAA Limited Data Use Agreement (DUA)
Identify Elements of ePHI and Data Scope. Map the dataset to HIPAA definitions. Start by invent...
HIPAA Obligations for Freestanding Emergency Departments When Exchanging Imaging with Receiving Hospitals
HIPAA Privacy Rule for Treatment Information. As a freestanding emergency department (FSED), you...
HIPAA Compliance Guide for HIV PrEP Clinics: Storing Sexual History Questionnaires in Cloud Form Tools
Sexual history questionnaires contain highly sensitive patient health information (PHI) that must...
Is PowerSchool Health Office Integration HIPAA-Compliant for School Immunization Data?
You want to know whether PowerSchool’s Health Office Integration can be used in a HIPAA-compliant...
HIPAA Policy for EAP Vendors: Limit Which Crisis Note Fields Reach Employer Dashboards
Your Employee Assistance Program handles sensitive Protected Health Information (PHI). This HIPAA...
HIPAA Training for Vestibular Therapists Filming Balance Assessments on Personal Phones
Filming balance assessments can sharpen clinical decision-making, but it instantly touches Protec...
Do Cloud Services for Home Hemodialysis Machines Require a BAA for Daily Treatment Log Uploads?
Short answer: in the United States, yes—if a cloud service creates, receives, maintains, or trans...
HIPAA Policy for Chemo Suite Nurses: Documenting Infusion Reactions in Shared Folders
HIPAA Policy Overview. This policy guides chemo suite nurses on documenting infusion reactions w...
HIPAA Compliance for Anticoagulation Clinics: Can You Text INR Results Outside the Patient Portal?
HIPAA Requirements for Text Messaging. Texting lab values like INR involves Protected Health Inf...
Ready to simplify HIPAA compliance?
Join thousands of organizations that trust Accountable to manage their compliance needs.
Kevin Henry
CEO @Accountable
As founder and CEO of Accountable, Kevin leads our mission to simplify HIPAA compliance for healthcare organizations. With a background in healthcare technology and healthcare, he has been instrumental in developing innovative solutions that make compliance accessible and manageable for organizations of all sizes.