Posts tagged with ""
A practice-operations guide to running Anthem telehealth visits: eligibility verification, documentation habits that survive an audit, platform BAAs, and how virtual visit records get handled in a right-of-access request.
Carl B. Johnson
A practice-operations walkthrough of how bloating ICD 10 symptom codes get selected, documented, and transmitted — and the records-request, minimum necessary, and business associate obligations that ride along with every claim.
Carl B. Johnson
Most practices run on six or seven documents people loosely call "the HIPAA form." Here's what each one does, which elements make an authorization valid, and where the vendor and records-handling risk actually sits.
Carl B. Johnson
A practice-operations guide to the 36415 CPT code: how the collection charge gets documented and billed, and how the requisition, specimen label, courier handoff, and lab portal create privacy obligations most risk analyses never touch.
Carl B. Johnson
A practice-operations breakdown of the 99213 CPT code description — how code selection gets documented, who touches the claim, and where the privacy and vendor obligations attach.
Carl B. Johnson
A practice-operations guide to the ICD-10-CM code families that cover diarrhea, the documentation chain your staff owns, and the BAA, minimum-necessary, and records-request duties that attach the moment a code leaves the chart.
Carl B. Johnson
An operations guide to the 99214 CPT code for administrators: how level selection is documented, how to run internal audits without creating new PHI exposure, and which vendors touching the claim need a signed BAA.
Carl B. Johnson
A working checklist for therapy practice owners and privacy officers: psychotherapy notes, business associate agreements, the 30-day records clock, telehealth vendors, and the 42 CFR Part 2 compliance date in February 2026.
Carl B. Johnson
A practical breakdown of what HIPAA actually requires from a dental office — vendor agreements, records deadlines, breach clocks, training records — and what the documented evidence has to look like when OCR asks.
Carl B. Johnson
The Privacy Rule requires you to name one person and document it. Here is what that person owes you every month, every deadline they own, and the paper trail that proves the job is actually being done.
Carl B. Johnson