HIPAA

HIPAA Release Form: What Your Practice Must Get Right

A signed form is not automatically a valid authorization. Here are the required elements, the situations that always demand one, and the documentation an OCR investigator will ask for.

OCR HIPAA Enforcement

OCR HIPAA Enforcement: What Actually Triggers a Case

OCR HIPAA enforcement rarely starts with a raid. It starts with a data request letter and a 30-day deadline. Here is what investigators ask for, who at your practice has to answer, and what evidence has to already exist.

HIPAA Privacy Rule

HIPAA Privacy Rule: What Your Practice Must Do Now

A working breakdown of the HIPAA Privacy Rule for practice owners and privacy officers: the deadlines, the role assignments, and the documentation that survives an OCR inquiry.