hipaa.app updates, status and compliance updates
Compression garment encounters generate referrals, orders, fitting measurements, proof of delivery, and payer appeals — each on a different retention clock. Here is how to build a defensible retention and destruction policy around them.
Carl B. Johnson
One knee effusion encounter can move protected health information through eight or nine separate organizations before the claim is paid. Here is the map, the BAA gaps, and the cleanup checklist.
Carl B. Johnson
An adult-onset autoimmune diabetes referral pushes PHI across primary care, endocrinology, and an outside lab in a matter of days. Here is the permitted-disclosure, vendor, and documentation workflow that keeps that handoff defensible.
Carl B. Johnson
A telehealth visit for PCOS medication management passes through four vendor systems before the clinician says hello. Here's the intake, consent, and BAA workflow administrators need to document.
Carl B. Johnson
A rare-diagnosis referral packet touches six or seven organizations in its first month. Here's how to map that trail, close the BAA gaps, and handle the notification clock when a vendor is the one that loses the chart.
Carl B. Johnson
Clinical photographs live in the designated record set, which means patients can request them. Here is the timeline, verification, fee, and vendor workflow your practice needs before that call comes in.
Carl B. Johnson
A hyperparathyroidism workup spreads a patient's chart across labs, imaging centers, endocrinology, and surgery. Here is the records, retention, and release workflow your staff actually has to run.
Carl B. Johnson
In practices built around controlled-substance follow-ups and DEA renewal cycles, the front desk carries more privacy risk than the server room. Here is what to fix, who owns it, and what to document.
Carl B. Johnson
One wrist fracture encounter can push PHI through a dozen outside organizations in six weeks. Here is how to map that trail, decide who needs a business associate agreement, and keep the register current.
Carl B. Johnson
Insulin follow-up generates high-volume portal traffic with attachments, proxy logins, and third-party device data. Here's the routing, vendor, and log-review policy your front desk needs before the next 4:47 p.m. message lands.
Carl B. Johnson