Healthcare Compliance Resources
Practical guidance for healthcare organizations on HIPAA privacy and security, cyber risk, vendors, incident response, and audit preparedness. Articles are dated and reviewed periodically.
HIPAA Readiness Checklist
Thirty questions to check whether your organization could produce key compliance evidence today.
What Should a HIPAA Compliance Program Include?
The core components of a working HIPAA compliance program, and why documentation matters as much as the safeguards themselves.
HIPAA ComplianceWhat Is a Security Risk Analysis?
What the HIPAA Security Rule's risk analysis requirement means in practice, what a useful one covers, and how often to revisit it.
Business AssociatesWhen Is a Business Associate Agreement Needed?
How to tell whether a vendor is a business associate under HIPAA, what the agreement must cover, and how to keep track of your vendors.
Incident ResponseWhat to Do After a Potential HIPAA Incident
A practical sequence for responding to a potential privacy or security incident, from containment to breach assessment and documentation.
Audit ReadinessCommon HIPAA Documentation Gaps
The documentation problems we see most often when organizations assess their readiness, and how to close them before anyone asks.
CybersecurityWhy Healthcare Organizations Are Targeted by Cyberattacks
What makes healthcare providers attractive targets for attackers, and the safeguards that address the most common attack paths.
No articles match your search. Try a different term or topic.
Information on this website is general and educational. It is not legal advice. Consult qualified counsel about your organization's specific legal obligations.
Have questions about your own compliance environment?
Articles cover general topics. A compliance review looks at your organization specifically.