Healthcare Compliance

HIPAA

Technical deep-dives into HIPAA, HITECH, and HITRUST requirements. This resource provides specific configuration guides for PHI protection, Business Associate Agreement (BAA) negotiation strategies, and technical safeguards for health-tech innovators.

All FISMA & NIST RMF FedRAMP CMMC Federal AI Governance GovCon Compliance Federal Cybersecurity Federal Zero Trust Federal GRC Engineering AI Governance GRC Engineering Cybersecurity Cloud Security HIPAA SOC 2
HIPAA

Is ChatGPT HIPAA Compliant? Plan-by-Plan Matrix

Which ChatGPT plan does your organization use? Not the plan the IT department approved. The plan your clinical staff actually uses. The one a medical assistant discovered through a colleague. The one a billing specialist...

Read the Guide
HIPAA

What Is a Business Associate Agreement (BAA)?

Before the 2013 HIPAA Omnibus Rule, Business Associates operated in a regulatory gray zone. Covered entities signed agreements. Vendors accepted them. HHS had no direct enforcement authority over the vendors themselves. When Advocate Medical Group...

Read the Guide
The Authority Brief

One compliance analysis per week from Josef Kamara, CPA, CISSP, CISA. Federal and private compliance, written for practitioners.