hipaa.app updates, status and compliance updates
A practical retention and destruction playbook for the paper, video, and outside records generated by vestibular repositioning encounters — including the three overlapping clocks and the vendor paperwork most practices forget.
Carl B. Johnson
A patient's antiemetic frequency question generates a portal message, a J-code line with units, a prior auth packet, and four vendor handoffs. Here is the administrative trail and who is accountable for each step.
Carl B. Johnson
A single sore-throat visit generates disclosures to a lab, a pharmacy, a primary care office, and sometimes a school. Here is the administrative workflow, role by role, that keeps those handoffs lawful and documented.
Carl B. Johnson
A telehealth block for kidney disease stages visits touches labs, a dialysis center, a transplant program, and four vendors before the video even starts. Here is the intake, consent, and vendor workflow that keeps that traffic defensible.
Carl B. Johnson
A single encounter involving a boxed-warning drug can push chart data to eight or more outside organizations. Here is how to sort which ones are business associates, which are not, and what to log.
Carl B. Johnson
A single cervical adenopathy workup can scatter records across four organizations. Here's how to run the request through verification, the 30-day clock, fees, and vendor agreements without tripping right-of-access rules.
Carl B. Johnson
Shared-decision encounters that hinge on absolute risk reduction generate artifacts your chart may not be capturing: calculator outputs, decision-aid versions, and vendor logs. Here is the records workflow that keeps them retrievable and releasable.
Carl B. Johnson
A practical front-desk privacy audit for practices that see carcinoid tumor referrals: sign-in sheets, waiting-room announcements, incidental disclosure rules, answering-service BAAs, and how to document all of it.
Carl B. Johnson
Filing or supporting a BCBS antitrust lawsuit payout claim pushes years of remittance data out of your practice and into law firms, recovery consultants, and file-transfer portals. Here's how to map that chain and decide who signs a BAA.
Carl B. Johnson
A portal message asking you to forward records to another provider triggers three separate verifications. Here's how a national NPI finder fits into the workflow — and the four things it will never tell your front desk.
Carl B. Johnson