HIPAA Privacy Rule Changes May Be Coming: What Healthcare Organizations Should Know
The HHS Office for Civil Rights (OCR) has been considering HIPAA Privacy Rule changes to improve care coordination, strengthen patient access rights, and reduce administrative burden. The changes were proposed in 2021. As of August 2026, the rulemaking is at the Final Rule Stage and under regulatory review, but no final rule has been published. […]
Navigating Patient Pushback: What to Do When a Patient Refuses to Sign the Notice of Privacy Practices
If you work at the front desk or help patients check in, you’ve probably encountered a situation that brings the check-in process to a halt: a patient refuses to sign the Notice of Privacy Practices (NPP) acknowledgment. You may hear comments like: “I’m not signing anything.” “I don’t give this office permission to share my […]
The HIPAA Right to Amend: The Steps Many Organizations Forget
One of the most misunderstood patient rights under HIPAA is the Right to Amend. Ask most healthcare compliance professionals about the amendment process and they’ll likely explain how patients can request a correction to their medical record. That’s certainly the first step, but not the last. Many organizations have policies describing how to receive and […]
Google’s New Review Rules: What Medical Practices Need to Know
For small and mid-sized medical practices, Google reviews are often one of the first places patients look when evaluating a provider. Before a patient calls or books an appointment, they are likely comparing providers online, scanning star ratings, reading comments, and deciding who feels trustworthy. Fair or not, that first impression often happens long before […]
You Completed Your Security Risk Analysis—Now What?
Finishing a Security Risk Analysis (SRA) feels like a major milestone, and it is! It takes time, coordination, and effort to do it right. The part that often gets overlooked from The Office for Civil Rights (OCR’s) perspective, is that completing the SRA isn’t the finish line. It’s the starting point. What we’re seeing in […]
The Hidden Risk of “Shadow AI” in Smaller Clinics
AI tools are becoming common in medical and dental offices to summarize notes, draft emails, or help with office policies. While these tools offer incredible convenience, using them without oversight creates a major privacy risk known as Shadow AI. For smaller practices, Shadow AI is a significant HIPAA problem that can sneak up on you […]
A Reality Check on Recent HIPAA Updates
If you work anywhere near healthcare compliance right now, it probably feels like HIPAA is changing every five minutes. Vendors are blasting emails. Consultants are posting urgent LinkedIn takes. Webinars are promising to explain “major HIPAA updates” before it’s “too late.” Let’s slow this way down and separate fact from hype. The NPP Changes Are […]
Important Update: Substance Use Disorder Records – Get Ready by February 16, 2026
Federal privacy rules for substance use disorder (SUD) treatment records are changing. On February 8, 2024, the U.S. Department of Health and Human Services updated 42 CFR Part 2, the law that governs how these records are handled. While the rule is already in effect, all covered organizations must be fully compliant by February 16, […]
HIPAA Reminder: Cadia Healthcare Settles OCR Investigation Over Unauthorized PHI Disclosures
The U.S. Department of Health and Human Services (HHS), through its Office for Civil Rights (OCR), recently announced a settlement with five healthcare providers collectively known as Cadia Healthcare Facilities. This settlement resolves potential violations of the HIPAA Privacy and Breach Notification Rules. Cadia Healthcare provides rehabilitation, skilled nursing, and long-term care services in Delaware. […]
The Patient’s Right to Restrict: What You Need to Know
When it comes to HIPAA, one of the lesser-known patient rights is the right to request restrictions on the use and disclosure of their protected health information (PHI). For staff and providers who are just starting to learn about compliance, this right can feel confusing. Do you always have to agree? What happens if you […]