hipaa.app updates, status and compliance updates
A practical retention and destruction playbook for the sprawling paper and digital trail an it band pain episode leaves behind — clocks, legal holds, shredding vendors, and certificates of destruction.
Carl B. Johnson
One low-back encounter can push protected health information through a dozen organizations before the claim pays. Here is the disclosure map, the BAA gaps, and the audit that closes them.
Carl B. Johnson
A late-night symptom search turns into a same-week ENT referral, and your records team owns the handoff. Here is the permitted-disclosure map, the referral packet standard, and the clocks that apply.
Carl B. Johnson
A virtual medication follow-up looks simple from the front desk and complicated from the compliance chair. Here is the intake, consent, vendor, and records workflow behind a routine telehealth diabetes visit.
Carl B. Johnson
Behavior-change documentation travels further than most practices realize — to coaching platforms, texting vendors, registries, and employer wellness programs. Here is how to map it, contract for it, and prove you did.
Carl B. Johnson
Thyroid workups scatter records across your practice, a reference lab, and an endocrinology group. Here is how to run right-of-access requests on those charts without blowing the 30-day clock.
Carl B. Johnson
A records and privacy workflow for practices that bill manipulative treatment: what staff must capture at the visit, how long three separate retention clocks run, and how to release the file without missing the 30-day access deadline.
Carl B. Johnson
Prevention and sexual health visits create front-desk exposure that most privacy programs never audit. Here's how to fix sign-in sheets, name callouts, waiting room acoustics, and check-in vendors before OCR or a patient complaint finds them first.
Carl B. Johnson
A single echocardiogram report can pass through eleven outside organizations before the follow-up visit. Here's how to inventory those vendors, decide which ones are business associates, and close the BAA gaps.
Carl B. Johnson
Follow-up messaging after manual therapy visits floods the portal inbox. Here is the routing, vendor, access-log, and retention policy your front desk needs before the next request arrives.
Carl B. Johnson