Blog
HIPAA insights & updates
Compliance Tips
How to Do a HIPAA Risk Assessment: A Step-by-Step Guide for Small Healthcare Practices
Learn how to conduct a HIPAA risk assessment for your small healthcare practice. This step-by-step guide covers OCR requirements, risk scoring, common mistakes, and free downloadable worksheets.
Mar 14, 2026
·
7 min read
HIPAA Updates
Understanding the HIPAA Breach Notification Rule
A data breach doesn't have to be a ransomware attack to trigger HIPAA's notification requirements. Here's what every healthcare practice needs to know about the 60-day clock, who gets notified, and what non-compliance has cost organizations like Anthem and Montefiore.
Feb 11, 2026
·
10 min read
Security Best Practices
Building a Culture of Security in Your Practice
Most healthcare breaches aren't sophisticated cyberattacks. They're a receptionist clicking a phishing link, a laptop left in a car, a former employee whose login was never turned off. Technology helps — but culture is what actually stops these things from happening.
Feb 04, 2026
·
8 min read