hipaa.app updates, status and compliance updates
Thyroid ultrasound generates images, reports, and scattered copies across PACS, referral portals, and the ultrasound cart itself. Here is how to set retention clocks and destroy the records defensibly.
Carl B. Johnson
One endocrine workup can push protected health information through a reference lab, an interface engine, a clearinghouse, a payer's utilization review team, and a records vendor. Here's who touches it and what your paperwork has to say about each one.
Carl B. Johnson
A single nail finding can pull a patient through primary care, dermatology, and a hospital lab in a week. Here is the referral and records-sharing workflow that keeps those disclosures permitted, documented, and off your breach log.
Carl B. Johnson
A telehealth visit for SI joint dysfunction touches six or seven vendors before the clinician says hello. Here is the intake, consent, and records workflow that keeps those handoffs defensible.
Carl B. Johnson
One anemia workup can push protected health information through six or more outside organizations in under two weeks. Here is how to map that chain, decide who needs a BAA, and assign the work by name.
Carl B. Johnson
A records request for a laryngopharyngeal reflux workup pulls from ENT notes, scope video, pH study data, and outside GI records. Here's the verification, timeline, fee, and vendor workflow that keeps you inside the right-of-access rules.
Carl B. Johnson
A throat-photo portal message, an ENT referral, and a records request in the same week. Here is the documentation, disclosure, and vendor workflow your staff has to run — without a single clinical decision.
Carl B. Johnson
Sign-in sheets, name-calling, kiosk screens, and lab callbacks are where most front-desk PHI exposure happens. Here's how to audit and fix them in a practice that works up high calcium levels.
Carl B. Johnson
Trace one ankle sprain encounter end to end and you will usually find eight to fourteen outside organizations touching the record. Here is how to map them and confirm which ones require a signed business associate agreement.
Carl B. Johnson
A single chronic constipation follow-up thread can touch your portal, your referral platform, your transcription vendor, and a caregiver's proxy login. Here's the administrative policy that keeps it contained.
Carl B. Johnson