Healthcare Security

A plain-English explainer on HIPAA compliance: the Privacy, Security and Breach Notification Rules, who must comply (covered entities and business associates), what counts as a violation, the four penalty tiers, and why there is no official "HIPAA certification." General information, not legal advice.

A plain-English explainer on HIPAA release and authorization forms: what they are, the required elements of a valid HIPAA authorization, the difference between consent and authorization, when each is needed, and where to find official sources. We explain rather than provide a fillable legal form. General information, not legal advice.

A plain-English explainer on the HITECH Act: how it promoted electronic health records, created the Breach Notification Rule, increased HIPAA enforcement and penalties, and — through the HIPAA Omnibus Rule — made business associates directly liable. General information, not legal advice.