Compliance Guides
Expert guides on HIPAA regulations, credentialing, risk management, and healthcare compliance operations.
HIPAA & Privacy
15 articlesWho Does HIPAA Apply To?
Covered entities, business associates, and who falls outside HIPAA requirements
Read guideHIPAA Minimum Necessary Rule
How to apply the minimum necessary standard to PHI disclosures and requests
Read guideIs Zoom HIPAA Compliant?
BAA requirements, encryption settings, and configuration for HIPAA-compliant Zoom use
Read guideIs Gmail HIPAA Compliant?
Google Workspace BAA, encryption, and settings needed for HIPAA-compliant email
Read guideIs WhatsApp HIPAA Compliant?
Why WhatsApp fails HIPAA requirements and what alternatives to use
Read guideIs Microsoft Teams HIPAA Compliant?
Microsoft 365 BAA, Teams configuration, and HIPAA compliance requirements
Read guideIs Google Drive HIPAA Compliant?
Google Workspace BAA, access controls, and sharing settings for HIPAA compliance
Read guideMost Common HIPAA Violations
Top violation categories, real penalty examples, and how to prevent each one
Read guidePsychotherapy Notes vs Progress Notes
Legal distinctions, storage requirements, and disclosure rules under HIPAA
Read guideIs Slack HIPAA Compliant?
Only with an enterprise plan and BAA, and even then not every feature is covered
Read guideIs Dropbox HIPAA Compliant?
Which Dropbox plans carry a BAA, the settings checklist, and the sharing mistakes that break compliance
Read guideIs FaceTime HIPAA Compliant?
Why FaceTime and iMessage fail HIPAA without a BAA, and what to use for telehealth instead
Read guideHIPAA Violation Penalties & Fines
Current civil penalty tiers, criminal penalties, state actions, and recent OCR enforcement examples
Read guideIs DocuSign HIPAA Compliant?
Which DocuSign plans get a BAA, the envelope settings that matter, and e-signature rules for consent forms
Read guideHow to File a HIPAA Complaint
OCR complaint portal walkthrough, the 180-day window, what happens next, and how practices should respond
Read guideRisk Management
4 articlesHIPAA Encryption Requirements
Encryption standards for data at rest and in transit under the Security Rule
Read guideHIPAA Breach Notification Guide
60-day notification timeline, breach risk assessment, and reporting procedures
Read guideStark Law & Anti-Kickback Guide
Referral restrictions, safe harbors, and how to structure compliant arrangements
Read guideBloodborne Pathogens Training
OSHA-compliant training requirements, exposure plans, and post-incident procedures
Read guideTraining & Documentation
9 articlesCAQH Credentialing Guide
Complete CAQH enrollment walkthrough, document requirements, and re-attestation deadlines
Read guideProvider Credentialing Guide
Step-by-step credentialing with insurance companies and hospital systems
Read guideHIPAA Training Requirements
Required training topics, frequency, documentation, and staff accountability
Read guidePOLST Form Guide
How POLST forms work, who needs them, and state-by-state requirements
Read guideClinical Documentation Improvement
CDI programs, query processes, and documentation best practices for accuracy
Read guideNP & PA Credentialing Guide
State practice authority, CAQH, Medicare 855I, and incident-to billing for nurse practitioners and PAs
Read guideGood Faith Estimate Requirements
Who must issue a GFE, the 1- and 3-business-day deadlines, required elements, and the $400 dispute rule
Read guideHIPAA & Bloodborne Pathogens Certification
Why no government HIPAA certification exists, real cost ranges, and how to document training instead
Read guideSecure Video Hosting for Medical Training
The two-question PHI test that decides whether you need a BAA or DRM, plus platforms compared for each path
Read guideCompliance Operations
16 articlesPatient Bill of Rights
Federal and state requirements for patient rights notices under ACA and EMTALA
Read guideAdvance Beneficiary Notice (ABN) Guide
When ABNs are required, how to issue them, and CMS form instructions
Read guideBest HIPAA Compliant Video Conferencing
Zoom, doxy.me, VSee, and more compared on BAA, encryption, and pricing
Read guideBest HIPAA Compliant Email
Paubox, Virtru, Hushmail, and Google Workspace compared for HIPAA email
Read guideBest HIPAA Compliant Messaging
TigerConnect, OhMD, Spruce, and more compared for secure healthcare messaging
Read guideBest HIPAA Compliance Software
Compliancy Group, HIPAA One, Accountable, and others compared on features and cost
Read guideBest Credentialing Software
Medallion, VerityStream, and other credentialing platforms compared
Read guideHIPAA vs FERPA
Key differences, overlap scenarios, and which law applies to student health records
Read guideBest HIPAA Compliant Texting Apps
Patient SMS platforms compared on BAA status, two-way texting, pricing, and TCPA rules
Read guideBest HIPAA Compliant Fax Services
SRFax, iFax, eFax, Documo, Faxage, and RingCentral compared on BAA tiers, encryption, and pricing
Read guideBest HIPAA Compliant File Sharing
Google Drive, OneDrive, Box, Dropbox, Egnyte, Sync.com, and ShareFile compared for HIPAA
Read guideBest HIPAA Compliant Scheduling Software
SimplePractice, Jane, NexHealth, Weave, and Acuity compared, plus the truth about Calendly
Read guideBest HIPAA Compliant Phone Systems
RingCentral, 8x8, Dialpad, Nextiva, GoTo, Weave, and Google Voice compared on BAA scope and voicemail rules
Read guideBest HIPAA Compliant Survey & Form Tools
Jotform, Google Forms, Formstack, SurveyMonkey, Qualtrics, IntakeQ, and Cognito Forms compared
Read guideBest HIPAA Compliant Payment Processing
Why processors usually aren't business associates, where the line moves, and six platforms compared
Read guideBest HIPAA Compliant Appointment Reminders
What a reminder may say under HIPAA, TCPA opt-out rules, and six platforms compared with sample scripts
Read guide