hipaa.app updates, status and compliance updates
Intake, consent, vendor contracts, and retention for telehealth visits — the administrative workflow behind a family physician encounter, written for the person who owns it when something goes wrong.
Carl B. Johnson
One hypermobility workup can push chart data to nine outside organizations in six weeks. Here's how to map that fan-out, sort business associates from treatment partners, and close the BAA gaps before OCR or a vendor breach finds them first.
Carl B. Johnson
A practical workflow for fulfilling right-of-access requests tied to Meckel's diverticulum encounters — verification, scoping, fees, vendor BAAs, and the 30-day clock your front desk is already running.
Carl B. Johnson
A single knee-pain visit can generate a referral packet, an imaging order, an employer note, and four vendor touchpoints. Here's the records, retention, and release workflow your staff should be running.
Carl B. Johnson
Shoulder and arm complaints generate referrals, imaging orders, and work-comp paperwork — all of which pass through your front desk. Here's how to close the incidental disclosure gaps in your waiting room without buying new software.
Carl B. Johnson
A single swollen-knee encounter moves PHI through imaging, labs, transcription, billing, and backup vendors. Here's how to map those handoffs and decide which ones legally require a Business Associate Agreement.
Carl B. Johnson
Portal threads about an over the counter muscle relaxer create PHI, records-request obligations, and vendor exposure — with no pharmacy record to back them up. Here's the routing, retention, and BAA workflow your front desk needs.
Carl B. Johnson
A single visit for parasite symptoms can scatter records across four organizations. Here is how to build retention clocks, freeze them when required, and destroy what is past due without creating a breach.
Carl B. Johnson
One urgent obstetric transfer generates records that cross four organizations before the claim is paid. Here is the administrative map of who touches PHI in a HELLP disorder encounter, and where your controls usually break.
Carl B. Johnson
A practical guide for practice administrators on moving records between primary care, ENT, allergy, and imaging without authorizations you don't need — and without the vendor gaps that turn a routine referral into a breach.
Carl B. Johnson