hipaa.app updates, status and compliance updates
A telehealth consult built around s globulin lab values pulls in an intake form vendor, a lab interface, a video platform, and a specialist. Here's how to run the privacy workflow so none of those handoffs becomes your breach report.
Carl B. Johnson
One lateral knee complaint can push chart data to nine outside organizations in a week. Here's how to inventory those disclosures, fix the BAA gaps, and handle a vendor breach notice without blowing your deadlines.
Carl B. Johnson
A practical walkthrough of the right-of-access workflow behind hypertriglyceridemia charts: timelines, verification limits, permitted fees, third-party directives, and the vendor contracts that sit underneath it all.
Carl B. Johnson
A single dietary counseling visit produces documentation across four systems, two organizations, and at least three vendors. Here is the records, retention, and release workflow your staff needs to run it cleanly.
Carl B. Johnson
Newborn bilirubin recheck visits stack up in the lobby, move records between three organizations, and put your front desk under pressure. Here is how to keep sign-in sheets, name calls, and lab handoffs inside the incidental disclosure rule.
Carl B. Johnson
A single recurring injection visit can route protected health information through eight or more outside companies. Here is how to map that path and decide which vendors require a signed Business Associate Agreement.
Carl B. Johnson
A single portal message about a pneumonia antibiotic course touches your designated record set, your routing rules, your proxy access settings, and four vendors. Here's how to write the policy before it breaks.
Carl B. Johnson
A practical retention and destruction policy for dermatology-adjacent records: which clock governs, what secure destruction actually requires, and how to document a purge you can defend three years later.
Carl B. Johnson
When a patient reports panax ginseng on an intake form — or buys a bottle at your front desk — that line becomes PHI moving through coders, clearinghouses, fulfillment vendors, and portal APIs. Here is the administrative map.
Carl B. Johnson
One wrist splint order can move a chart through four organizations in 72 hours. Here's how to route treatment disclosures, supplier orders, and workers' comp requests without an authorization form you don't need — or a leak you can't explain.
Carl B. Johnson