by Jillian Chubbuck | Apr 30, 2026 | Agents & Brokers, Blog, Business Associates, Dental Providers, Employers, General, Medical & Dental Providers, Medical Providers, Privacy, Security, Uncategorized
A common misconception in the healthcare industry is that privacy rights end when a patient’s life does. However, for any organization handling sensitive data, understanding how the law follows a patient into the afterlife is critical for staying compliant and... 
by Jillian Chubbuck | Apr 30, 2026 | Agents & Brokers, Blog, Business Associates, Dental Providers, Employers, General, Medical & Dental Providers, Medical Providers, Privacy, Security, Uncategorized
For many Covered Entities and Business Associates, HIPAA compliance is viewed as a “one-and-done” annual event. You check the boxes, conduct your staff training, finish your Risk Assessment, and breathe a sigh of relief. However, the Department of Health and Human... 
by Jillian Chubbuck | Apr 30, 2026 | Agents & Brokers, Blog, Business Associates, Dental Providers, Employers, General, Medical & Dental Providers, Medical Providers, Privacy, Security, Uncategorized
When most business owners hear the word “HIPAA,” they think of hospitals, doctors’ offices, and pharmacies. If you are an employer group or an insurance agent, there is a dangerous misconception that a company’s internal health plan is somehow exempt from this federal... 
by Jillian Chubbuck | Apr 28, 2026 | Agents & Brokers, Blog, Business Associates, Dental Providers, Employers, General, Medical & Dental Providers, Medical Providers, Privacy, Security, Uncategorized
For any modern organization, HIPAA compliance is not a “one and done” checklist. It is a living, breathing requirement that demands constant vigilance. As the Department of Health and Human Services (HHS) increases its audit frequency and cyberattacks... by Jillian Chubbuck | Mar 10, 2026 | Agents & Brokers, Blog, Business Associates, Dental Providers, Employers, General, Medical & Dental Providers, Medical Providers, Privacy, Security, Uncategorized
Artificial Intelligence is no longer a niche tool for tech startups. It is being deployed across the entire HIPAA spectrum: Business Associates (BAs) are using it for automated processing and data analytics, employer groups are utilizing it for plan management, and... by Jillian Chubbuck | Mar 10, 2026 | Blog, Encryption, File Sharing, General, Privacy, Security, Training
Summary: To use Google Workspace with Protected Health Information (PHI), you must enter into a Business Associate Agreement (BAA) with Google. As of 2026, this process is handled digitally within the Google Admin Console. However, a signed BAA is only the first step;... by Jillian Chubbuck | Feb 11, 2026 | Agents & Brokers, Business Associates, Employers, General, Medical & Dental Providers, Privacy, Security
At a Glance: OneDrive & HIPAA Compliance Is it compliant? Not by default. OneDrive requires an Enterprise-level subscription, a signed Business Associate Agreement (BAA), and specific security configurations to meet U.S. federal standards. 3 Key Requirements: Legal:... by Jillian Chubbuck | Feb 3, 2026 | Agents & Brokers, Business Associates, Employers, General, Medical & Dental Providers, Privacy, Security
In the modern cybersecurity landscape, a simple firewall is no longer a sufficient barrier against sophisticated threats. As highlighted in the January 2026 OCR Cybersecurity Newsletter, system hardening has become an essential process for shrinking your “attack... 
by Jillian Chubbuck | Jan 7, 2026 | Agents & Brokers, Business Associates, Employers, General, Medical & Dental Providers, Privacy, Security
For years, 42 CFR Part 2 has operated as a separate, more stringent set of rules than HIPAA. However, following the CARES Act, the HHS has issued a Final Rule to bring these two frameworks into closer alignment. The compliance deadline is February 16, 2026. It is... 
by Jillian Chubbuck | Nov 5, 2025 | Agents & Brokers, Business Associates, Employers, General, Medical & Dental Providers, Privacy, Security
In today’s digital world, protecting sensitive information is not optional— it’s essential. Whether you’re a healthcare provider, insurance company, or business associate handling protected health information (PHI), you’ve probably heard of SOC 2 compliance and... 
