Despite years of federal warnings, many HIPAA regulated organizations neglect to expand their security risk analysis very far ...

Some 5,100 patients treated at Kaiser Permanente were sent HIPAA breach notification letters Friday after a KP research computer was found to have been infected with malicious software. Officials say ...

WASHINGTON, D.C. — The Department of Health and Human Services (HHS), Office for Civil Rights (OCR), has reached a settlement with Comstar, LLC, a Massachusetts-based billing and collection company ...

An ambulance billing and collections firm has agreed to pay $515,000 to Massachusetts and Connecticut regulators and ...

The 2025 Top Ten list reflects a regulatory environment in significant transition. Last year’s healthcare privacy and security landscape ...

Minnesota’s case is one of several breaches of late involving legitimate access, a recurring issue in provider-heavy government health and human services systems.

HIPAA violations don’t always come from malicious attacks or headline-making data breaches. More often, they stem from everyday mistakes, like misdirected emails and vendors that aren’t as secure as ...

Protecting sensitive health information is a fundamental pillar of modern medicine. Patients trust healthcare organizations ...

The Covered Components and individuals who work in any of the Covered Components listed on the HIPAA Compliance website, are affected by this policy. Purdue University is a Hybrid Entity under the ...

Feb. 16, 2026, is the deadline for updating and distributing HIPAA Notices of Privacy Practices (“NPP”) that address the confidentiality ...