All Topics
Every topic on HIPAA.com in one place, from breach notification and business associates to enforcement, transactions and code sets, rulemaking, and workforce training.
Breach Notification
HIPAA breach notification: what counts as a breach, the risk assessment, and notifying individuals, HHS, and the media.
All in Breach Notification
Business Associates
Business associate obligations under HIPAA: BAAs, subcontractors, direct liability, and managing vendors that handle PHI.
All in Business Associates
Enforcement
HIPAA enforcement: OCR investigations, resolution agreements, civil money penalties, and lessons from settled cases.
All in Enforcement
Privacy
The HIPAA Privacy Rule: permitted uses and disclosures of PHI, patient rights, the minimum necessary standard, and notices of privacy practices.
All in Privacy
Regulations & Rulemaking
The HIPAA statute and its rules: HITECH, the Omnibus Rule, proposed rules, and how the regulations have changed over time.
All in Regulations & Rulemaking
Security
The HIPAA Security Rule: administrative, physical, and technical safeguards for ePHI, risk analysis, and security management.
All in Security
Training
HIPAA workforce training: what the rules require, who needs it, and how to build a program that holds up to an audit.
All in Training
Transactions & Code Sets
HIPAA standards for electronic transactions, code sets, and identifiers, including X12 and the NPI.
All in Transactions & Code Sets