Compliance & Security Blog
Practical guides on website compliance for regulated industries.
HIPAA Is Google Forms HIPAA Compliant? The Catch You Can't Afford to Ignore
Yes, Google Forms can be HIPAA-compliant — but only with a signed BAA and the right Workspace settings. Here's what most medical practices get wrong.
Enforcement $103K HIPAA Settlement: How One Phishing Email Cost a Small Practice 2,000 Patient Records
OCR's 11th Risk Analysis Initiative case shows why 'we have antivirus' is not a HIPAA risk analysis — and why small practices are the new enforcement target.
HIPAA HIPAA Fines Are Hitting Record Levels — Here's the Data
OCR enforcement is accelerating in 2025–2026. Real fine amounts, the new Risk Analysis Initiative, and why state laws (MHMDA, CMIA, HB 300, SHIELD) make penalties even worse for small practices.
HIPAA "We Use Calendly and Google Forms" — Why That's Already a HIPAA Violation for Your Clinic
The convenient tools you set up in 10 minutes — Calendly, Google Forms, SMS reminders — are the most common source of HIPAA violations in small dental, chiropractic, and PT clinics.
HIPAA Your IT Guy Is Violating HIPAA — And Doesn't Even Know It
Most small medical practices in Washington rely on general IT contractors who have no idea about HIPAA. Here's how they're putting your practice at risk — and what to do about it.
HIPAA Why Your Medical Practice Website Might Be Violating HIPAA Right Now
Most healthcare websites have critical HIPAA compliance gaps. Learn the 5 most common violations and how to fix them before they cost your practice thousands.