Expert guidance on HIPAA compliance, healthcare technology, and building a culture of compliance.
On March 27, 2026, threat group TeamPCP compromised the Telnyx Python SDK on PyPI in a three-stage supply chain attack. This article examines the HIPAA compliance gaps the attack exposed and what healthcare organizations must do to assess risk, manage vendor relationships, and meet breach notification obligations.
How the Telnyx Supply Chain Attack Exposes HIPAA Compliance Gaps
105 articles published
8 min read
Compliancy Group and One Guy Consulting both offer HIPAA gap analysis. One requires you to work through a platform step by step. The other automates the pipeline. Here is how they compare.
There is no such thing as HIPAA certification. HHS does not recognize it. No vendor can issue it. Here is what actually matters for HIPAA compliance.
HIPAA compliance involves dozens of recurring tasks: annual risk assessments, policy reviews, workforce training, vendor agreement tracking, and incident documentation. For small and mid-size healthca...
11 min read
HIPAA only applies if you are a covered entity. Here's how 45 CFR 160.103 defines one, who qualifies, and what OCR does when organizations get it wrong.
14 min read
Your NPP is the single document every patient receives. Get it wrong and OCR has a case before a breach even occurs.
11 min read
In May 2024, a cyberattack on Okanogan Behavioral HealthCare exposed the names, Social Security numbers, medical records, and diagnoses of nearly 1,100 patients. A class action settlement is now open. Here is what we know.
19 min read
A plain-English guide to all three HIPAA safeguard categories, administrative, physical, and technical, with CFR citations, real-world examples, and practical implementation steps for covered entities and business associates.
15 min read
PHI, PII, and ePHI are not interchangeable terms. Each has a different legal definition, different regulatory scope, and different compliance obligations. This guide breaks down exactly what each term means, where they overlap, and what your organization needs to do about each one.
17 min read
Learn what electronic Protected Health Information (ePHI) is, see real-world examples, and understand the HIPAA Security Rule requirements that govern how covered entities and business associates must protect it.