Healthcare & HIPAA

Arizona’s breach notification law is stricter than HIPAA If your Arizona medical practice experiences a data breach, you have two […]

A firewall alone does not make you HIPAA compliant Most Arizona medical practices have a firewall. Many assume that’s enough

Why Your Arizona Medical Practice Needs a Security Risk Assessment Now If you run a medical practice in the Phoenix

Why Healthcare IT Is Different Choosing an IT provider for a medical practice is not the same as choosing one for a general business. The regulatory requirements, the sensitivity of the data, and the consequences of getting it wrong are in a different category entirely. A breach at a retail store is bad. A breach…

Telehealth in Arizona: The Post-Pandemic Reality Telehealth went from a convenience to a lifeline during the pandemic, and Arizona embraced it wholeheartedly. Medical practices across Phoenix, Tucson, Flagstaff, and rural communities expanded virtual care options to serve patients who could not—or preferred not to—visit in person. Now, years later, telehealth is not going away. It…

If your medical practice experiences a data breach, the federal HIPAA Breach Notification Rule gives you 60 days to notify affected patients. That sounds like a reasonable timeline until you find out Arizona doesn’t give you 60 days. Arizona gives you 45. ARS 18-552, Arizona’s data breach notification law, requires notification within 45 days of…

A HIPAA security risk assessment is required every year for every medical practice. Here is what a real SRA looks like, how to tell if yours is adequate, and why OCR enforcement makes this the most important compliance step you can take.

HHS proposed major updates to the HIPAA Security Rule including mandatory encryption, MFA, and annual penetration testing. While the final rule has been pushed to 2027, OCR is already enforcing current requirements aggressively.