Recorded Webinars

Paul R. Hales

Email & Texting PHI - HIPAA, TCPA, and CMS Compliance

Health Care Providers, Health Plans and Business Associates only need to follow a simple "3-Step Safeguard" for emails and text messages to avoid violating HIPAA, administered by the Office for Civil Rights of the U.S. Department of Health and Human Services (HHS), and text message violations of the TCPA (Telephone Consumer Protection Act), administered by the Federal Communications Commission (FCC).

Paul R. Hales

Avoid HIPAA Violations - Websites, Social Media, Tracking Tech, Patient Reviews

Healthcare is a profession and also a highly competitive business.

Paul R. Hales

HIPAA Reproductive Health Privacy Safeguards Halted Nationwide

On June 18, 2025, a court order invalidated the HIPAA regulations regarding Reproductive Health for HIPAA Regulated Entities (Health Care Providers, Plans, Clearinghouses and Business Associates) that had been mandatory since December 23, 2024.

Paul R. Hales

RFK, Jr., and HHS - HIPAA Compliance Strategies

Robert F. Kennedy Jr., Secretary of the Department of Health and Human Services (HHS), has implemented significant changes to HHS, with more expected. Substantial modifications to the HIPAA Security Rule created during the previous administration are pending, and Secretary Kennedy is responsible for their final form. In June 2025, a federal court order declared the 2024 HIPAA privacy safeguards for reproductive health information unlawful and halted their nationwide enforcement.

Paul R. Hales

New HIPAA Compliance for Web Sites & Tracking Technologies, Social Media, and Patient Reviews

Health care is a profession and also a highly competitive business. Providers, large and small, depend on marketing for organizational growth and stability.

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Messages and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

HIPAA Rules for Social Media, Web Sites & Patient Reviews

Health care is a profession and also a highly competitive business. Providers, large and small, depend on marketing for organizational growth and stability. They know the Internet and social media are today's marketplace where patients look for health care providers

Paul R. Hales

AI, Health Care & HIPAA - New Compliance Challenges

The Problem Addressed by this Webinar: Artificial Intelligence (AI) is transforming health care, drawing on vast resources of health information to reshape everything from diagnosis to treatment, payment, health care operations, research and much more.

Paul R. Hales

HIPAA Rules for Social Media, Web Sites & Patient Reviews

Health care is a profession and also a highly competitive business. Providers, large and small, depend on marketing for organizational growth and stability. They know the Internet and social media are today's marketplace where patients look for health care providers

Paul R. Hales

HIPAA Rules for Social Media, Web Sites & Patient Reviews

Health care is a profession and also a highly competitive business. Providers, large and small, depend on marketing for organizational growth and stability. They know the Internet and social media are today's marketplace where patients look for health care providers

Paul R. Hales

2025 HIPAA Compliance Best Practices

The HIPAA Rules will continue to be laws that HIPAA-regulated entities must follow in 2025 despite President Trump’s promise of significant changes to the Department of Health and Human Services (HHS), which administers HIPAA.

Paul R. Hales

HIPAA Privacy Changes Under the Trump Administration

President Trump will appoint a Secretary of the Department of Health and Human Services and Director of the Office for Civil Rights (OCR) with missions to make significant modifications to the HIPAA Rules.

Paul R. Hales

Email & Text Messages - How to Comply with HIPAA, CMS, and the TCPA

Despite misinformation peddled on the Internet, HIPAA Covered Entities (Health Care Providers and Health Plans) can use unencrypted email and text messaging to communicate with the individuals they serve. In fact, if individuals prefer unencrypted emails and texts, Covered Entities must agree.

Paul R. Hales

AI, Health Care & HIPAA - New Compliance Challenges

The Problem Addressed by this Webinar: Artificial Intelligence (AI) is transforming health care, drawing on vast resources of health information to reshape everything from diagnosis to treatment, payment, health care operations, research and much more.

Paul R. Hales

HIPAA Rules for Social Media, Web Sites & Patient Reviews

Health care is a profession and also a highly competitive business. Providers, large and small, depend on marketing for organizational growth and stability. They know the Internet and social media are today's marketplace where patients look for health care providers

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Messages and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

New HIPAA Compliance for Web Sites & Tracking Technologies, Social Media, and Patient Reviews

Health care is a profession and also a highly competitive business. Providers, large and small, depend on marketing for organizational growth and stability.

Paul R. Hales

New HIPAA Compliance for Web Sites & Tracking Technologies, Social Media, and Patient Reviews

Health care is a profession and also a highly competitive business. Providers, large and small, depend on marketing for organizational growth and stability.

Paul R. Hales

Health Information Privacy in 2024 - Disruption and Upheaval

In 2024 the Basics of Health Information Privacy Compliance will not just be about HIPAA and OCR investigations anymore. HIPAA still applies nation-wide to HIPAA regulated entities - Health Care Providers, Health Plans and Business Associates. But now there are new, active and aggressive enforcers protecting the privacy of Individually Identifiable Health Information: They are:

Paul R. Hales

HIPAA Rules for Business Associates & Lurking Danger for Covered Entities

This webinar is for HIPAA Business Associates (BAs) and Covered Entities (CEs). Criminals increasingly focus cyber-attacks on BAs because one hit can give them access to PHI of all the BA's customers.

Paul R. Hales

Email & Text Messages - How to Comply with HIPAA, CMS and the TCPA

Despite misinformation peddled on the Internet, HIPAA Covered Entities (Health Care Providers and Health Plans) can use unencrypted email and text messaging to communicate with the individuals they serve. In fact, if individuals prefer unencrypted emails and texts, Covered Entities must agree.

Paul R. Hales

AI, Health Care & HIPAA - New Compliance Challenges

Artificial Intelligence (AI) is transforming health care, drawing on vast resources of health information to reshape everything from diagnosis to treatment, payment, health care operations, research and much more.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

AI, Health Care & HIPAA - New Compliance Challenges

Artificial Intelligence (AI) is transforming health care, drawing on vast resources of health information to reshape everything from diagnosis to treatment, payment, health care operations, research and much more.

Paul R. Hales

HIPAA Rules for Social Media, Web Sites & Patient Reviews

The Internet is jam-packed with unwitting but highly visible HIPAA violations committed by Covered Entities on their social media pages like Facebook, their organization's web site, patient testimonials they post and their responses to patient reviews - whether the review is positive or negative.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

AI, Health Care & HIPAA - New Compliance Challenges

Artificial Intelligence (AI) is transforming health care, drawing on vast resources of health information to reshape everything from diagnosis to treatment, payment, health care operations, research and much more.

Paul R. Hales

HIPAA Rules for Social Media, Web Sites & Patient Reviews

The Internet is jam-packed with unwitting but highly visible HIPAA violations committed by Covered Entities on their social media pages like Facebook, their organization's web site, patient testimonials they post and their responses to patient reviews - whether the review is positive or negative.

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Message and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

How to do HIPAA Risk Analysis & Risk Management Step-by-Step

The HIPAA Rules require Covered Entities and Business Associates to do Risk Analysis and Risk Management (RA-RM) but do not explain how to do them. OCR consistently calls Risk Analysis the foundation of every HIPAA Compliance program.

Paul R. Hales

HIPAA Rules for Web Sites, Social Media, & Patient Reviews

The Internet is flooded with highly visible, dangerous HIPAA violations committed unknowingly by health care providers on their websites, their social media like Facebook, and in posting or responding to Patient Reviews about the quality - good or bad - of the health care provider service.

Paul R. Hales

HIPAA Compliance for Remote Workers

Remote work involving PHI is here to stay - at least for a while: The Covid-19 Public Health Emergency has ended. But one effect of the pandemic remains - some covered entity and business associate staff continue to work at home or other remote locations where their duties involve receiving, creating, maintaining and transmitting protected health information (PHI).

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Message and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

How to do HIPAA Risk Analysis & Risk Management Step-by-Step

The HIPAA Rules require Covered Entities and Business Associates to do Risk Analysis and Risk Management (RA-RM) but do not explain how to do them. OCR consistently calls Risk Analysis the foundation of every HIPAA Compliance program.

Paul R. Hales

HIPAA Rules for Web Sites, Social Media, & Patient Reviews

The Internet is flooded with highly visible, dangerous HIPAA violations committed unknowingly by health care providers on their websites, their social media like Facebook, and in posting or responding to Patient Reviews about the quality - good or bad - of the health care provider service.

Paul R. Hales

How to do HIPAA Risk Analysis & Risk Management Step-by-Step

The HIPAA Rules require Covered Entities and Business Associates to do Risk Analysis and Risk Management (RA-RM) but do not explain how to do them. OCR consistently calls Risk Analysis the foundation of every HIPAA Compliance program.

Paul R. Hales

HIPAA Rules for Web Sites, Social Media, & Patient Reviews

The Internet is flooded with highly visible, dangerous HIPAA violations committed unknowingly by health care providers on their websites, their social media like Facebook, and in posting or responding to Patient Reviews about the quality - good or bad - of the health care provider service.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

How to do HIPAA Risk Analysis & Risk Management Step-by-Step

The HIPAA Rules require Covered Entities and Business Associates to do Risk Analysis and Risk Management (RA-RM) but do not explain how to do them. OCR consistently calls Risk Analysis the foundation of every HIPAA Compliance program.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

How to do HIPAA Risk Analysis & Risk Management Step-by-Step

The HIPAA Rules require Covered Entities and Business Associates to do Risk Analysis and Risk Management (RA-RM) but do not explain how to do them. OCR consistently calls Risk Analysis the foundation of every HIPAA Compliance program.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

How to do HIPAA Risk Analysis & Risk Management Step-by-Step

The HIPAA Rules require Covered Entities and Business Associates to do Risk Analysis and Risk Management (RA-RM) but do not explain how to do them. OCR consistently calls Risk Analysis the foundation of every HIPAA Compliance program.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted. There is only one exception. Patients have the absolute right to communicate with Covered Entities by unencrypted email and text message - if the patients have been informed there is some level of risk and prefer using unencrypted electronic transmissions.

Paul R. Hales

HIPAA Compliance for Remote Workers

Covid-19 suddenly made widespread maintenance, transmission and receipt of protected health information (PHI) by people working remotely from home a new reality - and exposed that PHI to significant HIPAA breach risks. Protocols to protect PHI during remote work had to be developed quickly on the fly with little time to train or properly equip workforce members. It’s not surprising that many remote work HIPAA protocols are incomplete and slapdash patchworks because covered entities faced unprecedented patient surges and focused on meeting vital patient care obligations. Business associates had to continue serving covered entities while quickly hit by unexpected stay-at-home orders and social distancing requirements in the office.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Message and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

NIST/OCR–HIPAA Risk Analysis & Risk Management Explained Step-by-Step

Risk Analysis and Risk Management (RA-RM) are OCR’s top enforcement priority and the basis of every HIPAA Compliance program. RA-RM steps are easy to follow – if you know the steps. But the HIPAA Rules do not lay out specific RA-RM steps.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted.

Paul R. Hales

HHS Mandatory Email & Text Message Encryption Rules with Only One Exception for Informed Patients

HHS and CMS have confirmed the requirement that all Emails and Text Messages containing Protected Health Information (PHI) must be encrypted.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

HIPAA Rules for Social Media, Web Sites & Patient Reviews

The Internet is jam-packed with unwitting but highly visible HIPAA violations committed by Covered Entities on their social media pages like Facebook, their organization's web site, patient testimonials they post and their responses to patient reviews - whether the review is positive or negative.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Message and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

Regular (unencrypted) Email and Text Messaging containing Protected Health Information (PHI) are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

HIPAA Rules for Social Media, Web Sites & Patient Reviews

The Internet is jam-packed with unwitting but highly visible HIPAA violations committed by Covered Entities on their social media pages like Facebook, their organization's web site, patient testimonials they post and their responses to patient reviews - whether the review is positive or negative.

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Message and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

OCR Compliance Plus - Step-by-Step HIPAA Risk Analysis & Risk Management

Risk Analysis and Risk Management (RA-RM) are OCR's top enforcement priority and the basis for every HIPAA Compliance program.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

Avoid Business Associate Danger! - HIPAA BA Compliance Explained

Business Associate HIPAA violations are in the spotlight - and in the crosshairs of OCR regulators and class action lawyers. Covered Entities can be directly and equally liable for costs of violations by their Business Associates due the little known Federal Common Law of Agency incorporated in the HIPAA Enforcement Rule.

Paul R. Hales

MACRA-MIPS & Mandatory HIPAA Risk Analysis - Risk Management

The Medicare & Medicaid EHR Incentive Programs have changed since they began in 2011 and were widely known as Stage 1 Meaningful Use (MU).

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

How to do a HIPAA Risk Analysis

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilities and risks to your organization's PHI wherever it is located.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

Avoid Business Associate Danger! - HIPAA BA Compliance Explained

Business Associate HIPAA violations are in the spotlight - and in the crosshairs of OCR regulators and class action lawyers. Covered Entities can be directly and equally liable for costs of violations by their Business Associates due the little known Federal Common Law of Agency incorporated in the HIPAA Enforcement Rule.

Paul R. Hales

MACRA-MIPS & Mandatory HIPAA Risk Analysis - Risk Management

The Medicare & Medicaid EHR Incentive Programs have changed since they began in 2011 and were widely known as Stage 1 Meaningful Use (MU).

Paul R. Hales

New COVID-19 Telehealth HIPAA & Medicare Compliance Updates

The COVID-19 emergency brought major changes to HIPAA and Medicare Rules for Telehealth/Telemedicine.

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Message and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

How to do a HIPAA Risk Analysis

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilities and risks to your organization's PHI wherever it is located.

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Message and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

HIPAA Rules During the Coronavirus - COVID-19 - Outbreak

A widespread infectious disease outbreak like COVID-19 stresses the health care system.

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Message and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

HIPAA Risk Analysis & Risk Management - HHS/NIST Process Explained Step-by-Step

Risk Analysis and Risk Management (RA-RM) are OCR's top enforcement priority and the basis for every HIPAA Compliance program.

Paul R. Hales

Patient Engagement - HIPAA Rules for Websites

This session will explain the HIPAA Rules for Web Sites and Social Media. The secret is - HIPAA Rules are easy to follow, step-by-step - when you know the steps. The HIPAA Rules, HHS/OCR guidance, Resolution Agreements provide a simple, easy to use blueprint using your Web Site and Social Media to engage patients and comply with HIPAA.

Paul R. Hales

New COVID-19 Telehealth HIPAA & Medicare Compliance Updates

The COVID-19 emergency brought major changes to HIPAA and Medicare Rules for Telehealth/Telemedicine.

Paul R. Hales

New! - Modified HIPAA Compliance during the COVID-19 Emergency

Emergency waivers of some HIPAA compliance requirements have been put in place to help Health Care Providers throughout the United State cope with the COVID-19 Public Health Emergency.

Paul R. Hales

New COVID-19 Telehealth HIPAA & Medicare Compliance Updates

The COVID-19 emergency brought major changes to HIPAA and Medicare Rules for Telehealth/Telemedicine.

Paul R. Hales

New HIPAA Encryption Rules for Email & Text Message and Mandatory Exception for Patients

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

Email, Texting & HIPAA-TCPA Compliance - Electronic Message Rules & Myths

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that patients like and have the right to use. A simple 3 Step HIPAA Safeguard fully protects Covered Entities from violating both HIPAA and the TCPA (Telephone Consumer Protection Act) to ward off expensive TCPA class actions.

Paul R. Hales

New HIPAA Rules for Email and Text Messages

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that patients like and have the right to use.

Paul R. Hales

HIPAA Risk Analysis & Risk Management - HHS/NIST Process Explained Step-by-Step

Risk Analysis and Risk Management (RA-RM) are OCR's top enforcement priority and the basis for every HIPAA Compliance program.

Paul R. Hales

Email, Texting & HIPAA-TCPA Compliance – Electronic Message Rules & Myths

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that patients like and have the right to use.

  • Paul R. Hales
  • Recorded
  • Price: $89.5.  ¤179.00
  • View Details
Paul R. Hales

New HIPAA Rules for Text Messaging & Email

There is a simple 3 step HIPAA "safe harbor" that frees Covered Entities and Business Associates from any responsibility or liability for unauthorized access to Protected Health Information (PHI) in unencrypted emails and text messages during transmission and after receipt by the patient.

Paul R. Hales

Email & Text Messages - New HIPAA Rules & TCPA Dangers

New HIPAA Rules and guidance from the Office for Civil Rights and CMS following passage of the HITECH Act explain how to communicate with patients by unencrypted email and text messaging and also when you must encrypt electronic transmissions.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

There is a simple 3 step HIPAA "safe harbor" that frees Covered Entities and Business Associates from any responsibility or liability for unauthorized access to Protected Health Information (PHI) in unencrypted emails and text messages during transmission and after receipt by the patient.

Paul R. Hales

How to do a HIPAA Risk Analysis

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilities and risks to your organization's PHI wherever it is located.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

There is a simple 3 step HIPAA "safe harbor" that frees Covered Entities and Business Associates from any responsibility or liability for unauthorized access to Protected Health Information (PHI) in unencrypted emails and text messages during transmission and after receipt by the patient.

Paul R. Hales

Patient Engagement - HIPAA Rules for Websites

This session will explain the HIPAA Rules for Web Sites and Social Media. The secret is - HIPAA Rules are easy to follow, step-by-step - when you know the steps. The HIPAA Rules, HHS/OCR guidance, Resolution Agreements provide a simple, easy to use blueprint using your Web Site and Social Media to engage patients and comply with HIPAA.

Paul R. Hales

HIPAA Breach - Or Not? How to Find Out & What to Do

This webinar explains the inter-connected Breach Notification Rule requirements of Covered Entities and Business Associates when a Business Associate or Subcontractor Business Associate suffers a Breach. And it covers the special, more restrictive compliance requirements when a Business Associate or Subcontractor is an Agent under the Federal Common Law of Agency - including how to avoid creating an Agency relationship by mistake.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

There is a simple 3 step HIPAA "safe harbor" that frees Covered Entities and Business Associates from any responsibility or liability for unauthorized access to Protected Health Information (PHI) in unencrypted emails and text messages during transmission and after receipt by the patient.

Paul R. Hales

Lessons from OCR Audits - Risk Analysis Explained Step-by-Step

The Phase 2 HIPAA Compliance Audit, increasing breaches of unsecured protected health information and rampant medical identity theft reveal a national crisis in HIPAA compliance.

Paul R. Hales

How to Comply with New HIPAA Email and Text Message Rules and Avoid Danger

Regular (unencrypted) Email and Text Messaging are effective engagement and communication tools that most patients prefer and have the right to use.

Paul R. Hales

New HIPAA Rules for Text Messaging & Email

There is a simple 3 step HIPAA "safe harbor" that frees Covered Entities and Business Associates from any responsibility or liability for unauthorized access to Protected Health Information (PHI) in unencrypted emails and text messages during transmission and after receipt by the patient.

Paul R. Hales

How to do a HIPAA Risk Analysis

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilities and risks to your organization's PHI wherever it is located.

Paul R. Hales

HIPAA Violations - Social Media, Web Sites, Patient Reviews - Simple Compliance Steps to Avoid Danger

Patient Engagement is a cornerstone of quality patient care and Web Sites and Social Media are indispensable patient engagement tools.

Paul R. Hales

HIPAA Violations - Social Media, Web Sites, Patient Reviews - Simple Compliance Steps to Avoid Danger

Patient Engagement is a cornerstone of quality patient care and Web Sites and Social Media are indispensable patient engagement tools.

Paul R. Hales

Lessons from OCR Audits - Risk Analysis Explained Step-by-Step

The Phase 2 HIPAA Compliance Audit, increasing breaches of unsecured protected health information and rampant medical identity theft reveal a national crisis in HIPAA compliance.

Paul R. Hales

3-Hour Virtual Seminar on HIPAA Compliance for 2019 - Clear, Complete, Step-by Step

This webinar will demonstrate how Covered Entities and Business Associates can comply calmly, confidently and completely with the HIPAA Rules.

Paul R. Hales

EHR Audit Trails and HIPAA - A Growing Legal Danger

All EHRs certified to qualify for the Medicare and Medicaid Electronic Health Records (EHR) Incentive Programs must maintain an Audit Log of actions related to Electronic Health Information (EPHI) that supports the forensic reconstruction of the sequence of changes to a patient's chart.

Paul R. Hales

The Role of a HIPAA Compliance Officer

You're the HIPAA Compliance Officer (Privacy, Security - or both). Congratulations! and Condolences?

Paul R. Hales

How to do a HIPAA Risk Analysis

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilities and risks to your organization's PHI wherever it is located.

Paul R. Hales

MACRA & MIPS - Patient Engagement - HIPAA Rules for Text Messaging & Email

There is a simple 3 step HIPAA "safe harbor" that frees Covered Entities and Business Associates from any responsibility or liability for unauthorized access to Protected Health Information (PHI) in unencrypted emails and text messages during transmission and after receipt by the patient.

Paul R. Hales

HIPAA Violations - Social Media, Web Sites, Patient Reviews - Simple Compliance Steps to Avoid Danger

Patient Engagement is a cornerstone of quality patient care and Web Sites and Social Media are indispensable patient engagement tools.

Paul R. Hales

3-Hour Virtual Seminar on HIPAA Compliance for 2019 -Clear, Complete, Step-by-Step

This webinar will demonstrate how Covered Entities and Business Associates can comply calmly, confidently and completely with the HIPAA Rules

Paul R. Hales

How to do a HIPAA Risk Analysis

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilities and risks to your organization's PHI wherever it is located.

Paul R. Hales

HIPAA Challenges in Email and SMS Communication

Email and text message are subject to the HIPAA Security Rule transmission standard. Changes in the Omnibus Rule in 2013 further clarified the importance of proper usage of email and text message, examples of electronic transmission media. Oftentimes used as a method to transmit PHI, electronic transmission media is an area that covered entities need to develop and implement policies and procedures to ensure HIPAA compliance.

Paul R. Hales

HIPAA Violations - Social Media, Web Sites, Patient Reviews - Simple Compliance Steps to Avoid Danger

This session will explain the HIPAA Rules for Web Sites and Social Media. The secret is - HIPAA Rules are easy to follow, step-by-step - when you know the steps.

Paul R. Hales

HIPAA Breach - Or Not? How to Find Out & What to Do

This webinar explains the inter-connected Breach Notification Rule requirements of Covered Entities and Business Associates when a Business Associate or Subcontractor Business Associate suffers a Breach. And it covers the special, more restrictive compliance requirements when a Business Associate or Subcontractor is an Agent under the Federal Common Law of Agency - including how to avoid creating an Agency relationship by mistake. This webinar for HIPAA Covered Entities and Business Associates explains the 5 Steps of HIPAA Breach.

Paul R. Hales

HIPAA Compliant Patient Engagement - New Rules - Email and Text (SMS) Health Care Providers and Business Associates

This webinar focuses on HIPAA Rules for transmitting informational email and text messages to patients over an electronic communications network.

Paul R. Hales

3-Hour Virtual Seminar on MACRA & MIPS - HIPAA Rules for Text Messaging & Email

Patient Engagement is widely recognized as essential for improving the quality of healthcare in the United States. Coordination of Care through Patient Engagement is a cornerstone of MACRA and revisions of Federal healthcare payment policy. Certified Electronic Health Record Technology (CEHRT) includes secure patient portals and secure messaging. Encrypted text message and email products are available from vendors.

Paul R. Hales

HIPAA Breach Notification Rule - What you Must do to Comply

Final regulations for the new HIPAA Breach Notification Rule require much more than notifying individuals affected by a Breach of their Protected Health Information (PHI). Covered Entities and Business Associates first must follow and document a very specific process to determine if a Breach occurred. If no Breach occurred documentary proof must be kept for six years. If a Breach did occur timely notifications and other actions must be undertaken and documented.

Paul R. Hales

Patient Engagement - HIPAA Rules for Websites

This session will explain the HIPAA Rules for Web Sites and Social Media. The secret is - HIPAA Rules are easy to follow, step-by-step - when you know the steps. The HIPAA Rules, HHS/OCR guidance, Resolution Agreements provide a simple, easy to use blueprint using your Web Site and Social Media to engage patients and comply with HIPAA.

Paul R. Hales

Why and How? - HIPAA Risk Analysis - Risk Management Explained Step-by-Step

This webinar for HIPAA Covered Entities and Business Associates will explain:

Paul R. Hales

Why and How? - HIPAA Risk Analysis - Risk Management Explained Step-by-Step

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilities and risks to your organization's PHI wherever it is located.

Paul R. Hales

Your 3 Step Safeguard - HIPAA Rules for Regular Email & Texts with Patients

Email and text message are subject to the HIPAA Security Rule transmission standard. Changes in the Omnibus Rule in 2013 further clarified the importance of proper usage of email and text message, examples of electronic transmission media. Oftentimes used as a method to transmit PHI, electronic transmission media is an area that covered entities need to develop and implement policies and procedures to ensure HIPAA compliance.

Paul R. Hales

HIPAA Compliant Patient Engagement - New Rules - Email and Text (SMS) Health Care Providers and Business Associates

This webinar focuses on HIPAA Rules for transmitting informational email and text messages to patients over an electronic communications network.

Paul R. Hales

3-Hour Virtual Seminar on MACRA & MIPS - HIPAA Rules for Text Messaging & Email

Patient Engagement is widely recognized as essential for improving the quality of healthcare in the United States. Coordination of Care through Patient Engagement is a cornerstone of MACRA and revisions of Federal healthcare payment policy. Certified Electronic Health Record Technology (CEHRT) includes secure patient portals and secure messaging. Encrypted text message and email products are available from vendors.

Paul R. Hales

Take the Fear out of HIPAA - Basic Step-by-Step Compliance

The HIPAA Rules are frequently misunderstood and inadvertently violated. However, HIPAA Rules are easy to follow, step-by-step, when you know the steps. This session will explain exactly how a health care provider's designated HIPAA Compliance Official can find the right steps for each HIPAA compliance topic and how the health care provider can review and be assured the practice is up to date and in compliance with the HIPAA Rules.

Paul R. Hales

HIPAA Risk Analysis-Risk Management - Explained & Demonstrated

This webinar for HIPAA Covered Entities and Business Associates will explain:

Paul R. Hales

HIPAA Cyber Crime - How to Prevent, Prepare, Respond and Recover

This webinar for HIPAA Covered Entities and Business Associates explains how to use the HIPAA Rules to Prevent, Prepare, Respond and Recover from Cyber Attacks.

Paul R. Hales

Scoop - Top Targets of Fed HIPAA Enforcers & Simple Steps to Take Control

This webinar for HIPAA Covered Entities and Business Associates will identify the top OCR HIPAA enforcement priorities for 2018 and explain simply how you can master HIPAA compliance requirements for each enforcement priority.

Paul R. Hales

3-Hour Virtual Seminar on MACRA & MIPS - HIPAA Rules for Text Messaging & Email

Patient Engagement is widely recognized as essential for improving the quality of healthcare in the United States. Coordination of Care through Patient Engagement is a cornerstone of MACRA and revisions of Federal healthcare payment policy. Certified Electronic Health Record Technology (CEHRT) includes secure patient portals and secure messaging. Encrypted text message and email products are available from vendors.

Paul R. Hales

HIPAA Compliant Patient Engagement - New Rules - Email and Text (SMS) Health Care Providers and Business Associates

This webinar focuses on HIPAA Rules for transmitting informational email and text messages to patients over an electronic communications network.

Paul R. Hales

HIPAA Compliant Patient Engagement - New Rules - Email and Text (SMS) Health Care Providers and Business Associates

This webinar focuses on HIPAA Rules for transmitting informational email and text messages to patients over an electronic communications network.

Paul R. Hales

3-Hour Virtual Seminar on MACRA & MIPS - HIPAA Rules for Text Messaging & Email

Patient Engagement is widely recognized as essential for improving the quality of healthcare in the United States. Coordination of Care through Patient Engagement is a cornerstone of MACRA and revisions of Federal healthcare payment policy. Certified Electronic Health Record Technology (CEHRT) includes secure patient portals and secure messaging. Encrypted text message and email products are available from vendors. But patients overwhelmingly choose easy-to-use unencrypted email and text messaging systems. Tens of thousands of unencrypted appointment reminders, healthcare instructions, patient satisfaction surveys, health and wellness newsletters and recall reminders are sent every day exposing Healthcare Providers to unnecessary, easily avoidable risks. HIPAA provides a simple, but little known "Safe Harbor" for Healthcare Providers that permits unencrypted email and text message transmissions to a patient.

Paul R. Hales

HIPAA Compliant Patient Engagement - New Rules - Email and Text (SMS) Health Care Providers and Business Associates

This webinar focuses on HIPAA Rules for transmitting informational email and text messages to patients over an electronic communications network.

Paul R. Hales

3-Hour Virtual Seminar on MACRA & MIPS - HIPAA Rules for Text Messaging & Email

Patient Engagement is widely recognized as essential for improving the quality of healthcare in the United States. Coordination of Care through Patient Engagement is a cornerstone of MACRA and revisions of Federal healthcare payment policy. Certified Electronic Health Record Technology (CEHRT) includes secure patient portals and secure messaging. Encrypted text message and email products are available from vendors. But patients overwhelmingly choose easy-to-use unencrypted email and text messaging systems. Tens of thousands of unencrypted appointment reminders, healthcare instructions, patient satisfaction surveys, health and wellness newsletters and recall reminders are sent every day exposing Healthcare Providers to unnecessary, easily avoidable risks. HIPAA provides a simple, but little known "Safe Harbor" for Healthcare Providers that permits unencrypted email and text message transmissions to a patient.

Paul R. Hales

MACRA & MIPS - Patient Engagement - HIPAA Rules for Web sites

This session will explain the HIPAA Rules for Web Sites and Social Media. The secret is - HIPAA Rules are easy to follow, step-by-step - when you know the steps. The HIPAA Rules, HHS/OCR guidance, Resolution Agreements provide a simple, easy to use blueprint using your Web Site and Social Media to engage patients and comply with HIPAA.

Paul R. Hales

Business Associates 2018 - 5 Top HIPAA Compliance Priorities

This session will explain Business Associate HIPAA compliance responsibilities There is a secret to Business Associate HIPAA compliance. The secret is - HIPAA Rules are easy to follow, step-by-step - when you know the steps.

Paul R. Hales

MACRA & MIPS - Patient Engagement - HIPAA Rules for Text Messaging & Email

There is a simple 3 step HIPAA "safe harbor" that frees Covered Entities and Business Associates from any responsibility or liability for unauthorized access to Protected Health Information (PHI) in unencrypted emails and text messages during transmission and after receipt by the patient.

Paul R. Hales

HIPAA Risk Analysis & Risk Management - Clear, Complete, Step-by-Step Explanation for Covered Entities & Business Associates

In this session you will learn how to do a complete HIPAA Risk Analysis - Risk Management, step-by-step, see the steps demonstrated and explained clearly in plain language.

Paul R. Hales

HIPAA, Ransomware & Cyber Criminal Chaos Prevent, Prepare, Respond and Recover

This webinar will explain about Ransomware attack on a Covered Entity or BA that encrypts PHI is presumed to be a HIPAA Breach according to the U. S. Department of Health and Human Services (HHS).

Paul R. Hales

HIPAA Compliant Patient Engagement - New Rules - Email and Text (SMS) Health Care Providers and Business Associates

This webinar focuses on HIPAA Rules for transmitting informational email and text messages to patients over an electronic communications network.

Paul R. Hales

HIPAA Challenges in Email and SMS Communication

Email and text message are subject to the HIPAA Security Rule transmission standard. Changes in the Omnibus Rule in 2013 further clarified the importance of proper usage of email and text message, examples of electronic transmission media. Oftentimes used as a method to transmit PHI, electronic transmission media is an area that covered entities need to develop and implement policies and procedures to ensure HIPAA compliance.

Paul R. Hales

New HIPAA Rules for Communicating with Patients by Unencrypted Email and Text Messages

This webinar focuses on HIPAA Rules for transmitting informational email and text messages to patients over an electronic communications network.

Paul R. Hales

Risky Business - Healthcare Email & Text Messages

There is a secret to HIPAA - the HIPAA Rules are easy to follow step-by-step when you know the steps. This webinar explains the simple steps allowing unencrypted Email and Text Messaging with patients. Email and Text Messages are Electronic Transmissions subject to the HIPAA Security and Privacy Rules. Patients have an absolute right to receive unencrypted Emails and Text Messages containing PHI from or on behalf of their Healthcare Providers. HHS guidance issued in 2013, 2014 and 2016 clearly and unequivocally explains the simple steps Covered Entities must follow to send unencrypted Email and Text Messages to patients. These include Emails and Text Messages sent by a Business Associate on behalf of a Covered Entity. This webinar explains the steps that provide a "Safe Harbor" for Covered Entities if an unencrypted Email or Text Message to a patient is intercepted or read by an unauthorized third party. It uses moving graphic displays to explain the important HIPAA definition of PHI clearly. HIPAA law is not intuitive.

Paul R. Hales

Ransomware and HIPAA - Prevent, Prepare, Respond and Recover

This course explains treacherous Ransomware threats attacking the Healthcare Industry and how to prevent, prepare for, respond to and recover from a Ransomware attack. It covers HIPAA Rules that apply to Ransomware, compliance with the HIPAA Rules and how to conduct a HIPAA Breach Risk Assessment to prove a Ransomware attack did not result in a Breach of Unsecured Protected Health Information (PHI) - a violation of the HIPAA Privacy Rule.

Paul R. Hales

HIPAA Risk Analysis: Clarified, Explained, Demonstrated

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilities and risks to your organization's PHI wherever it is located.

Paul R. Hales

How to do a HIPAA Risk Analysis

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilities and risks to your organization's PHI wherever it is located.

Paul R. Hales

HIPAA Social Media, Marketing & Websites

Whether you have a website, a LinkedIn page, or use Facebook, Twitter, Youtube, or Instagram, you are exposing your practice/business to a potential Breach. The avenues of electronic communications are growing and we must grow with it in order to maintain HIPAA compliance and keep the integrity and privacy of patients and their protected health information. In this lesson, policies and procedures will be discussed that will help to ensure a compliant understanding of the usage of social media, marketing efforts and website development. This is more than posting a notice or opt-out message. This is an accurate, comprehensive and easy to implement way of patient engagement through examples and recent breaches. Your entire practice/business personnel should be aware of the harmful effects of the misuse of social media, marketing, and websites and the devices used to access these portals.

Paul R. Hales

HIPAA Breach Notification Rule - What You Must Do To Comply

Final regulations for the new HIPAA Breach Notification Rule require much more than notifying individuals affected by a Breach of their Protected Health Information (PHI). Covered Entities and Business Associates first must follow and document a very specific process to determine if a Breach occurred. If no Breach occurred documentary proof must be kept for six years. If a Breach did occur timely notifications and other actions must be undertaken and documented.

Paul R. Hales

Get Ready For Your HIPAA Compliance Audit

The webinar will concentrate on topics that HHS has announced will be the focus of the first round of "desk audits". They reflect significant areas of non-compliance revealed in the 2012 pilot audits and HHS HIPAA violation investigations concluded by Resolution Agreements and Corrective Action Plans.

Paul R. Hales

How to do a HIPAA Risk Analysis

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilities and risks to your organization's PHI wherever it is located.

Paul R. Hales

New HIPAA Rules for Communicating with Patients by Unencrypted Email and Text Messages

This webinar focuses on HIPAA Rules for transmitting informational email and text messages to patients over an electronic communications network.

Paul R. Hales

New HIPAA Rules for Communicating with Patients by Unencrypted Email and Text Messages

This webinar focuses on HIPAA Rules for transmitting informational email and text messages to patients over an electronic communications network.

Paul R. Hales

HIPAA Risk Analysis: Clarified, Explained, Demonstrated

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilites and risks to your organization's PHI wherever it is located.

Paul R. Hales

HIPAA Challenges in Email and SMS Communication

Email and text message are subject to the HIPAA Security Rule transmission standard. Changes in the Omnibus Rule in 2013 further clarified the importance of proper usage of email and text message, examples of electronic transmission media. Oftentimes used as a method to transmit PHI, electronic transmission media is an area that covered entities need to develop and implement policies and procedures to ensure HIPAA compliance.

Paul R. Hales

Social Media, Marketing & Websites

Whether you have a website, a LinkedIn page, or use Facebook, Twitter, Youtube, or Instagram, you are exposing your practice/business to a potential Breach. The avenues of electronic communications are growing and we must grow with it in order to maintain HIPAA compliance and keep the integrity and privacy of patients and their protected health information. In this lesson, policies and procedures will be discussed that will help to ensure a compliant understanding of the usage of social media, marketing efforts and website development. This is more than posting a notice or opt-out message. This is an accurate, comprehensive and easy to implement way of patient engagement through examples and recent breaches. Your entire practice/business personnel should be aware of the harmful effects of the misuse of social media, marketing, and websites and the devices used to access these portals.

Paul R. Hales

How to do a HIPAA Risk Analysis

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilities and risks to your organization's PHI wherever it is located.

Paul R. Hales

HIPAA Breach Notification Rule - What You Must Do To Comply

Final regulations for the new HIPAA Breach Notification Rule require much more than notifying individuals affected by a Breach of their Protected Health Information (PHI). Covered Entities and Business Associates first must follow and document a very specific process to determine if a Breach occurred. If no Breach occurred documentary proof must be kept for six years. If a Breach did occur timely notifications and other actions must be undertaken and documented.

Paul R. Hales

HIPAA Rules for New Patient Attraction: Websites, Testimonials, Email and Text Messaging

Attracting New Patients is essential for growing and sustaining a Health Care Provider's Practice. Patient Attraction is a big business leading many providers, without knowing it, to commit highly visible HIPAA violations. Key patient attraction tools like websites, social media, patient satisfaction surveys, email and text messaging are all subject to HIPAA rules that are frequently overlooked or ignored.

Paul R. Hales

Get Ready For Your HIPAA Compliance Audit

The webinar will concentrate on topics that HHS has announced will be the focus of the first round of "desk audits". They reflect significant areas of non-compliance revealed in the 2012 pilot audits and HHS HIPAA violation investigations concluded by Resolution Agreements and Corrective Action Plans.

Paul R. Hales

New HIPAA Rules for Communicating with Patients by Unencrypted Email and Text Messages

This webinar focuses on HIPAA Rules for transmitting informational email and text messages to patients over an electronic communications network.

Paul R. Hales

How to do a HIPAA Risk Analysis

This lesson is designed to enable your Organization to perform a complete Risk Analysis of all PHI it creates, receives, maintains or transmits in any format. You will understand and identify threats, vulnerabilities and risks to your organization's PHI wherever it is located.

Paul R. Hales

HIPAA Compliance for Smaller Health Care Providers

HIPAA Privacy, Security, Breach Notification and Enforcement Rules mandate compliance by Health Care Providers of all sizes - from one physician, dentist, optometrist, or licensed clinical social worker to the largest medical center.

  • Paul R. Hales
  • Recorded
  • Price: $112.5.  ¤225.00
  • View Details



Filters