Business Associate Agreements

Zofran Pregnancy Pathways: Mapping Every Vendor BAA

A single prenatal antiemetic prescription can generate nine or more outbound data flows. Here's how to identify which of those vendors are business associates, which aren't, and how to close the gaps before an auditor or a plaintiff's firm finds them.

Carl B. Johnson

— 24 Aug 2026

Business Associate Agreements

Electrophoresis of Serum Data: Your Vendor Exposure Map

A single serum protein electrophoresis order can touch eight outside organizations before the result lands back in your chart. Here is how to map which of them are business associates, which are not, and what your contracts need to say.

Carl B. Johnson

— 22 Aug 2026

HIPAA Privacy Rule

Subclinical Hyperthyroidism Visits: Front-Desk Privacy

Sign-in sheets, name callouts, and check-in tablets are legal under HIPAA — until they aren't. A practical audit of the front-desk workflows around thyroid follow-up visits, with scripts, vendor questions, and breach-decision steps.

Carl B. Johnson

— 21 Aug 2026

HIPAA Privacy Rule

Chronic Rhinitis Referrals: The Records Handoff Rules

A practical walkthrough of the records-sharing workflow behind specialist referrals: what HIPAA permits without authorization, who owns each step, and where the handoff actually breaks.

Carl B. Johnson

— 19 Aug 2026

Business Associate Agreements

Varicose Vein Diseases Data: Your Vendor BAA Exposure

A single vein consult can touch nine outside organizations before lunch. Here's how to inventory those vendors, decide who needs a Business Associate Agreement, and fix the breach-notification clauses most practices sign without reading.

Carl B. Johnson

— 19 Aug 2026

HIPAA Privacy Rule

Stasis Ulcer Venous Clinics: Front-Desk Privacy Gaps

Repeat-visit wound and vein clinics create privacy exposure the average practice never faces. Here is how to audit sign-in sheets, waiting room scripts, companion disclosures, and the vendor list behind them.

Carl B. Johnson

— 17 Aug 2026

Records Retention

Nail Pitting Chart Retention: Clocks and Secure Disposal

A nail pitting visit generates a chart note, clinical photos, a referral packet, and a returned consult letter — each on a different retention clock. Here's how to schedule, document, and defend destruction.

Carl B. Johnson

— 11 Aug 2026

Telehealth Compliance

Tinea Manuum Telehealth Intake: Consent and Photo Rules

A telehealth visit for a hand rash generates photos, a consent record, a referral packet, and a vendor trail. Here is how to run that intake workflow without creating an unlogged disclosure or a records request you cannot fill.

Carl B. Johnson

— 8 Aug 2026

HIPAA Privacy Rule

Back Pain Relief 2026 Clinics: Front-Desk Privacy Gaps

A practical walkthrough of sign-in sheets, waiting-room sightlines, kiosk vendors, and referral handoffs at the front desk of a high-volume spine and pain practice — written for the person who owns the policy binder.

Carl B. Johnson

— 3 Aug 2026

HIPAA Privacy Rule

Treat Venous Disease Clinics: Front-Desk Privacy Fixes

Sign-in sheets, check-in phone calls, and corridor whiteboards create the most common privacy complaints in a vein practice. Here is what HIPAA actually permits at the front desk, and how to document the safeguards you already use.

Carl B. Johnson

— 31 Jul 2026