hipaa.app updates, status and compliance updates
A heel wound follow-up generates portal photos, referral packets, and after-hours messages your front desk has to route. Here is the administrative policy that keeps those records governed.
Carl B. Johnson
A practical retention and destruction policy for the records generated when a suspicious lesion moves through biopsy, pathology, and specialist referral — including the vendor agreements and destruction logs auditors ask for first.
Carl B. Johnson
One claudication disease claim can pass through seven organizations before it pays. Here is how to map the PHI trail, assign roles, and make sure every hop is covered by a signed BAA.
Carl B. Johnson
Ear pain visits generate outbound records: ENT referrals, audiology orders, imaging, school notes. Here's which disclosures HIPAA permits without authorization, which ones need paperwork, and how to audit the workflow your front desk actually runs.
Carl B. Johnson
A telehealth visit for a hand rash generates photos, a consent record, a referral packet, and a vendor trail. Here is how to run that intake workflow without creating an unlogged disclosure or a records request you cannot fill.
Carl B. Johnson
A single flagged CBC can move protected health information through seven organizations in four days. Here's how to map that trail, find the vendors missing a BAA, and close the gaps before someone else does.
Carl B. Johnson
A practical workflow for handling right-of-access requests when a patient's chart spans your practice, a vascular specialist, and an outside imaging facility — timelines, verification, fees, and the vendor contracts underneath it all.
Carl B. Johnson
An acute stress disorder encounter often produces more records traffic in ninety days than a routine visit produces in five years. Here is the intake, retention, and release workflow your staff should be running.
Carl B. Johnson
The waiting room is where most gynecology practices leak PHI — not the server room. A practical walkthrough of sign-in sheets, callouts, reminder texts, and referral handoffs for sensitive visits.
Carl B. Johnson
One routine headache encounter moves PHI through intake, documentation, referral, pharmacy, billing, and reminders. Here's how to build a vendor map from that pathway and identify every business associate relationship that needs paper.
Carl B. Johnson