hipaa.app updates, status and compliance updates
A hepatitis C screening result rarely stays in one chart. Here is the records-sharing workflow — permitted treatment disclosures, Part 2 limits, BAA gaps, and the clocks that run in the background.
Carl B. Johnson
Minor ENT complaints drive a steady stream of self-scheduled telehealth visits. Here's the intake, consent, vendor, and referral workflow that keeps those twelve-minute encounters out of your breach log.
Carl B. Johnson
One periorbital edema encounter can push PHI through a photo app, a lab, a referral portal, a clearinghouse, and a records-release vendor in 72 hours. Here's how to inventory that trail and close the BAA gaps.
Carl B. Johnson
A practical workflow for practices handling right-of-access requests tied to PCOS and metformin care: response deadlines, identity verification, fee limits, third-party directives, and the vendor contracts that hold the records.
Carl B. Johnson
A practical walkthrough of the documentation, retention, and release workflow behind routine gynecologic visits — lab interfaces, BAAs, portal timing, proxy access, and the front-desk habits that leak.
Carl B. Johnson
A concussion reinjury visit brings coaches, parents, athletic trainers, and employers to your front counter. Here is how to keep sign-in sheets, waiting rooms, and check-in vendors inside the reasonable-safeguards line.
Carl B. Johnson
A single urticaria encounter can touch eight or nine outside companies before the claim goes out. Here's how to map which of them are business associates, which aren't, and how to close the contract gaps.
Carl B. Johnson
A routine portal question about tonsil stones triggers routing, retention, vendor, and records-request obligations most front desks never trained for. Here's the administrative workflow.
Carl B. Johnson
A practical retention and destruction policy for the paper and electronic records generated by an Epclusa treatment course — prior auth packets, specialty pharmacy faxes, lab results, and patient assistance files.
Carl B. Johnson
A routine sinus visit generates a data trail across your EHR, e-prescribing network, clearinghouse, payer, and pharmacy. Here's who touches that PHI, which relationships require a BAA, and how to audit the path.
Carl B. Johnson