Step-by-Step: Establishing a BAA with Google for HIPAA
Summary: To use Google Workspace with Protected Health Information (PHI), you must enter into a Business Associate Agreement (BAA) with Google. As of 2026, this process is handled digitally within the Google Admin Console. However, a signed BAA is only the first step;...
HIPAA Risk Assessment – Is this required?
The question is simple, but the answer carries serious weight: Is a HIPAA Risk Assessment required? The short answer is an emphatic Yes. A HIPAA Risk Assessment, or Risk Analysis, is the single most critical and foundational requirement of the entire HIPAA Security...
The 2025 Workday & Salesforce Breach: A HIPAA Wake-Up Call for Vendor Management
More Than Just Another Tech Headline The widespread 2025 data breach affecting users of Workday and Salesforce is far more than a distant technology problem; it is a critical and urgent case study for every healthcare provider, employer group health plan, health...
The Ultimate Guide to Making a Company HIPAA Compliant
In today’s interconnected world, safeguarding sensitive information is paramount, especially in healthcare. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law designed to protect an individual’s Protected Health Information...