The HIPAA Journal
JUNE 12, 2025
For example, the survey found that a significant number of healthcare organizations have not appointed a dedicated HIPAA Privacy Officer who holds sufficient decision-making authority, raising concerns about their leadership’s commitment to HIPAA compliance. The survey also examined training practices at HIPAA-regulated entities.
The HIPAA Journal
MAY 20, 2025
All HIPAA covered entities and business associates are required to have procedures in place for identifying and responding to suspected or known security incidents , mitigating any harmful effects of the incidents, and documenting the incidents and their outcomes ( 164.308(a)(6) ). Source: 164.304.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
The HIPAA Journal
APRIL 30, 2025
The implication of this requirement if finalized – is that covered entities will only be permitted to contract services from business associates that can demonstrate compliance with HIPAA. Despite the variety of compliance requirements, some areas of HIPAA compliance are common to all business associates.
The HIPAA Journal
MARCH 28, 2025
The guidance was challenged in court and was partially rescinded, and while tracking tools on websites do not violate HIPAA when they are added to unauthenticated web pages, they cannot be used on authenticated websites unless consent is obtained or a business associate agreement is signed with the provider of those tools.
The HIPAA Journal
JUNE 26, 2025
The largest data breach of the month occurred at the business associate Serviceaide, a provider of agentic AI-powered agents for IT and workflow management. The second-largest data breach also occurred at a business associate. TX Business Associate 88,609 Hacking incident Shelby Dermatology d.b.a
Arkenea
MARCH 31, 2025
Privacy Incorporation Expenses influence HIPAA compliance costs Anticipated costs differ amongst organizations, based on the size, computer system used, covered entities (CE) involved, business associates involved, and more. Type of organization: Risk levels and quantity of PHI safeguarded depends on the type of organization.
Arkenea
JUNE 27, 2025
In the recent past, thousands of people took virtual appointments, online consultation grew, and families were not allowed to be next to you even if you were giving birth or going for major surgeries. Make sure you sign a Business Associate Agreement (BAA) with your HIPAA hosting server.
Expert insights. Personalized for you.
116 
Let's personalize your content