hipaa.app updates, status and compliance updates
A hemolyzed specimen doesn't produce a result — it produces a workflow. Here's the portal messaging policy, front-desk script boundaries, and vendor paperwork your practice needs before the next redraw notice lands.
Carl B. Johnson
A nail pitting visit generates a chart note, clinical photos, a referral packet, and a returned consult letter — each on a different retention clock. Here's how to schedule, document, and defend destruction.
Carl B. Johnson
One wet mount result touches seven organizations before it gets paid. Here's the coding, claims, and vendor workflow around a clue cells encounter — and where your practice picks up privacy liability.
Carl B. Johnson
A dermatology referral involving Soolantra sends chart notes, clinical photographs, and prior authorization paperwork across organizational lines. Here is the administrative workflow, the permitted-disclosure rules behind it, and the vendor gaps that trip practices up.
Carl B. Johnson
A remote lip-lesion visit touches your portal, your video platform, your image storage, and at least one referral partner. Here's the administrative workflow that keeps that chain defensible.
Carl B. Johnson
A single erythrasma encounter can move protected health information through seven separate organizations. Here is how to inventory those vendors, decide who needs a Business Associate Agreement, and fix the contract gaps before OCR finds them.
Carl B. Johnson
Teaching clinics fulfill records requests under the same right-of-access rules as everyone else — but with rotating residents, split record sets, and affiliation agreements in the way. Here is the workflow that keeps you inside 30 days.
Carl B. Johnson
A nail-finding encounter produces clinical photos, an outbound referral packet, and inbound specialist results. Here is the records, retention, and vendor workflow that keeps all three defensible.
Carl B. Johnson
High-volume sore-throat visits put your check-in window under load. Here's how sign-in sheets, waiting room acoustics, pharmacy callbacks, and school notes create incidental disclosure risk — and the walkthrough that fixes it.
Carl B. Johnson
One newborn follow-up visit can route protected health information through a dozen outside companies. Here's how to map the vendor chain in an umbilical granuloma pathway and decide which contracts require a signed BAA.
Carl B. Johnson