Social Media Ideas for Protected Health Information

Health PEI reports cybersecurity incident involving personal health information

A cybersecurity incident involving a third-party service provider resulted in unauthorized access to a Health PEI file containing personal health information. Health PEI is notifyi...

Navigating HIPAA Compliance When Working With Virtual Medical Assistants

Learn what HIPAA requires before a virtual medical assistant handles patient data, from business associate agreements to remote security safeguards.

Regulatory Landmines in Health Care Litigation: PHI, Kickback, and Corporate Structure Risks [Video]

Business Associates’ Involvement in US Health Care Data Breaches: Longitudinal Analysis

Background: Health care organizations increasingly rely on business associates (BAs) to provide clinical, administrative, and technology services that require access to protected h...

MedImpact PBM breach leaves employer plan members' health data exposed

The firm's 11-month notification gap raises vendor risk questions for employer plan sponsors

There’s No Such Thing as HIPAA Certification: What to Ask a Healthcare Outsourcing Vendor Instead

Healthcare outsourcing services help clinics, hospitals, and digital health platforms reduce administrative overhead. However, clinical directors and compliance managers often […]...

OCR Reaches 55th HIPAA Right of Access Settlement

On August 27, 2026, the Office for Civil Rights (“OCR”) at the U.S. Department of Health and Human Services (“HHS”) announced its resolution of an investigation into a California-b...

AI Is Transforming Healthcare Data, PHI Is the Wall Nobody Talks About

The following is a guest article by Tejaswani Veerni, Business Intelligence Developer at UI Health Every health system wants to use AI. The conversations are happening from the C-s...

Privacy Tip #510 – Social Engineering Vishing Campaigns Hitting Health Care Sector

The Health Information Sharing and Analysis Center (ISAC) recently warned that ShinyHunters is using voice-phishing attacks to target the healthcare sector. “The hackers used medic...

Congressional Action on Health Care Cybersecurity: HISAA is Re-Introduced and the Health Care Cybersecurity and Resilie...

Gspikes: HIPAA-Compliant Website on Drupal: What It Actually Takes

What makes a healthcare website HIPAA compliant on Drupal: the three places patient data gets in, the BAA question, the tracking-pixel rules after AHA v. Becerra, the module stack,...

Can US Patient Data Be Handled Offshore? What HIPAA Allows and Where Contracts Draw the Line

When evaluating healthcare support outsourcing to optimize revenue cycles, providers must carefully assess how outsourced healthcare services handle protected health […] Magellan S...

Oracle Health and ID.me Team to Simplify Secure Access to Health Data

Oracle Health and ID.me announced a collaboration to integrate ID.me's trusted digital identity capabilities into Oracle Health solutions. The integration will simplify patient...

Morning Headlines 9/2/26

Healthcare organizations can now connect EHR and additional industry data ...

This Week in Health Tech 10/7/26

HealthEx — The Demo with Claude & the CEO Speaks!

I spent some time figuring out and getting a little help in uploading my health records to Claude, using HealthEx. I did the demo with Ruheed Mohamed, the head of technical service...

Everything you need to know about HIPAA, PIPEDA, and therapy messaging in Canada

A client sends their therapist a quick message about an upcoming appointment. They have booked online, completed an intake form, and received a reminder through therapy appointment...

Readers Write: Governing AI for HIPAA Compliance: Building a Secure AI-Driven Compliance Program

Governing AI for HIPAA Compliance: Building a Secure AI-Driven Compliance ...

Privacy Commissioner puts Manage My Health, Health NZ on notice after data breach

The Privacy Commissioner has given Health NZ and patient portal Manage My Health until next year to comply with health privacy rules after a massive data breach last year.

This Week in Health Tech 9/30/26

This Week in Health Tech 9/2/26

Behavioral Health Crisis Communications: Response Plan

Behavioral health crisis communications under HIPAA and 42 CFR Part 2: crisis types, the first 24 hours, who to notify and how to rebuild trust afterward.

Oracle Health Hack Exposes Data of Nearly 20M People

Patient names, Social Security numbers, doctors and diagnoses might have been breached in the cyberattack.

This Week in Health Tech 10/21/26