Blog / HIPAA

HIPAA Security Risk Assessment Template: Free Excel Download

Free HIPAA security risk assessment template in Excel: ePHI inventory, all Security Rule safeguards, a scored risk register and an automatic dashboard.

Azure HIPAA Compliance: BAA, Shared Responsibility and a Configuration Checklist

Azure HIPAA compliance for HealthTech teams: how the Microsoft BAA works, what you still own, and a checklist for configuring Azure workloads that hold ePHI.

HIPAA Compliance for Remote Employees: A Home-Office Checklist for PHI

HIPAA compliance for remote employees: a home-office checklist mapped to the Security and Privacy Rules, plus how to prove remote PHI safeguards to auditors.

HIPAA Administrative Safeguards: A 45 CFR 164.308 Checklist and Operating Plan

A HIPAA administrative safeguards checklist for 45 CFR 164.308, with owners, cadences, evidence and a 90-day rollout plan small HealthTech teams can run.

HIPAA Right of Access: How to Handle Patient Requests Under 45 CFR 164.524

Handle every HIPAA right of access request on time: designated record set, 30-day deadline, fees, denial grounds and business associate duties for HealthTech.

HIPAA Technical Safeguards: An Engineering Guide to 45 CFR 164.312

HIPAA technical safeguards explained for engineers: each 45 CFR 164.312 standard, required vs addressable specs, SaaS implementation and the evidence to keep.

HIPAA Tracking Technologies: Pixels, Analytics and the OCR Bulletin After AHA v. Becerra

HIPAA tracking technologies explained: what the OCR bulletin still requires after AHA v. Becerra, plus a tag audit checklist and BAA table for HealthTech teams.

42 CFR Part 2: A Compliance Guide for HealthTech Vendors Handling SUD Records

42 CFR Part 2 explained for HealthTech vendors: covered SUD records, the 2024 final rule, how it differs from HIPAA, and the steps to reach Part 2 compliance.

FTC Health Breach Notification Rule: A Guide for Health Apps Outside HIPAA

FTC Health Breach Notification Rule guide for health apps outside HIPAA: who is covered, what counts as a breach, deadlines, penalties and HIPAA vs FTC.

HIPAA Incident Response Plan: Security Incident Procedures for HealthTech Teams

Build a HIPAA incident response plan that meets 164.308(a)(6), separates security incidents from breaches and gives HealthTech teams a clear, repeatable process