Plain-English HIPAA, for people who run practices.
Short, practical answers for clinic managers who don't have a compliance department.
HIPAA risk assessment for small clinics: a plain-English checklist
What a HIPAA security risk analysis actually is, why it's the first thing auditors ask for, and how a small practice can do one in an afternoon.
Does my clinic need HIPAA training every year?
What HIPAA actually requires for workforce training, why annual training is the standard, and how to document it so it holds up in an audit.
What is a business associate agreement, and which vendors need one?
A plain-English guide to BAAs for small medical practices, including which vendors need one, what it must say, and what happens if you don't have one.
7 phishing scams that target medical offices (and how staff can spot them)
Real-world patterns of phishing emails, texts and calls aimed at clinics, plus the simple habit that stops nearly all of them.
HIPAA breach at your clinic? What to do in the first 24 hours
A step-by-step guide for small practices to contain a possible breach, assess it, and understand the notification deadlines.