HIPAA

Serum Protein Electrophoresis: Records Workflow Guide

A single serum protein electrophoresis order can generate a requisition, a numeric report, a graphical tracing, an interpretive narrative, and reflex add-on results across three organizations. Here is the records, retention, and vendor workflow that keeps all of it releasable.

Carl B. Johnson

— 21 Aug 2026

HIPAA Privacy Rule

Subclinical Hyperthyroidism Visits: Front-Desk Privacy

Sign-in sheets, name callouts, and check-in tablets are legal under HIPAA — until they aren't. A practical audit of the front-desk workflows around thyroid follow-up visits, with scripts, vendor questions, and breach-decision steps.

Carl B. Johnson

— 21 Aug 2026

HIPAA Compliance

Euvolemic Care Pathways: Mapping Vendors That Need BAAs

One fluid-status workup can move protected health information through a dozen outside organizations. Here is how to inventory them, decide which require a Business Associate Agreement, and close the gaps before an auditor finds them.

Carl B. Johnson

— 20 Aug 2026

HIPAA Compliance

Wart Treatment Billing: Who Sees the PHI in Your Claim

A single destruction-of-lesion encounter can generate a chart note, clinical photos, a claim, a clearinghouse transaction, an EOB, and a patient statement. Here is who touches that PHI and where the workflow breaks.

Carl B. Johnson

— 20 Aug 2026

HIPAA Privacy Rule

Chronic Rhinitis Referrals: The Records Handoff Rules

A practical walkthrough of the records-sharing workflow behind specialist referrals: what HIPAA permits without authorization, who owns each step, and where the handoff actually breaks.

Carl B. Johnson

— 19 Aug 2026

HIPAA Compliance

High Calcium Levels in Blood: Telehealth Intake Privacy

A telehealth visit triggered by an abnormal lab result moves data through five or six systems before the patient logs off. Here is the intake, consent, vendor, and referral workflow that keeps that movement defensible.

Carl B. Johnson

— 19 Aug 2026

Business Associate Agreements

Varicose Vein Diseases Data: Your Vendor BAA Exposure

A single vein consult can touch nine outside organizations before lunch. Here's how to inventory those vendors, decide who needs a Business Associate Agreement, and fix the breach-notification clauses most practices sign without reading.

Carl B. Johnson

— 19 Aug 2026

HIPAA Compliance

Vasomotor Rhinitis Records Requests: The 30-Day Clock

A practical workflow for handling right-of-access requests when a patient's chart is split across allergy, ENT, and primary care: verification, the 30-day clock, permitted fees, and the vendor contracts that hold the records.

Carl B. Johnson

— 18 Aug 2026

HIPAA Privacy Rule

Stasis Ulcer Venous Clinics: Front-Desk Privacy Gaps

Repeat-visit wound and vein clinics create privacy exposure the average practice never faces. Here is how to audit sign-in sheets, waiting room scripts, companion disclosures, and the vendor list behind them.

Carl B. Johnson

— 17 Aug 2026

HIPAA Compliance

Sialorrhea Care Pathway: Which Vendors Require a BAA

A sialorrhea referral touches more outside organizations than most encounters in your schedule. Here is how to map those data flows, decide which vendors are business associates, and close the BAA gaps you find.

Carl B. Johnson

— 17 Aug 2026