Skip to main content

HIPAA, regulatory requirements, and what they actually mean for health care IT operations. Coverage of the HIPAA Security Rule, OCR enforcement, risk analysis, policy requirements, and regulatory updates - with specific CFR citations so you know exactly what the rules say.

athenahealth Bets on AI While Oracle Health Loses Ground

The EHR market is splitting into two distinct experiences for health care organizations that are not running Epic.

From Interlock's 2.7M PHI Strike to Paper Charts at 35 Clinics

When a ransomware group encrypts your EHR, your phones, and your email at the same time, the theoretical parts of you

The Pixel Litigation Wave Hitting Healthcare

I. The Ad You Should Not Have Seen

2.7 Million Records Exposed: What the Navia Benefit Solutions Breach Means for Health Care IT

Most people have never heard of Navia Benefit Solutions. That is kind of the point.

ABC HIPAA Framework Delivers Practical Disaster Recovery That Satisfies 45 CFR 164.308(a)(7) Without the Shelf-Ware

Health care IT teams already know the requirement.

The Industry Fought Back and the Rule Is Still Moving Forward - What the May 2026 Finalization Target Means for Your Organization Right Now

Picture this. You are the sole IT person at a 20-bed Critical Access Hospital.

OCR Enforcement 2025-2026: Why Incomplete Security Risk Analyses Are Still the #1 Settlement Driver

Picture this.

Subscribe to Compliance