Built for healthcare organizations that need real answers, not legal jargon. Get instant HIPAA guidance, generate compliant documents in minutes, track enforcement actions, and train your staff, all in one place.
New to HIPAA?
Plain English HIPAA guidance for every role at your organization. No prior compliance experience needed.
Explore HIPAA Basics →Federal & state healthcare privacy statutes
Enforcement actions since HITECH Act
Guidance memos, alerts & rule changes
Practices, health systems, payers & vendors
220 enforcement actions tracked · $120.1M in total penalties · Updated weekly
Open Enforcement HubLatest insights
A cyberattack on Aesto Health's Amazon Web Services infrastructure exposed the records of roughly 9.54 million patients across 30 covered entity clients. Here is what compliance officers need to know about third-party risk, BAA oversight, and the breach timeline.
TheGentlemen ransomware group has claimed an attack on Nutex Health and is threatening to publish stolen patient data. A class action lawsuit was filed in Texas just three days after Nutex's SEC 8-K disclosure, raising urgent questions about hospital-sector ransomware liability.
OCR's 55th Right of Access settlement targets Azul Vision, a California optometry and ophthalmology practice, for failing to provide a patient her records within the required 30-day window. Here is what compliance officers need to know.
The ShinyHunters extortion group claims it leaked 7.1 million Salesforce records from Baxter International containing patient PII. Here is what compliance officers and healthcare vendors need to know about the HIPAA risk exposure.
Compliance Tools
Purpose-built compliance tools for assessment, documentation, and incident readiness.
BAA Workflow
Free with accountDraft HIPAA-oriented BAA language with structured clauses for security obligations, incident notice, and subcontractor flow-down terms.
Open BAA GeneratorSecurity Rule
Run a weighted HIPAA Security Rule assessment and generate a downloadable PDF report with prioritized remediation actions.
Run Risk AssessmentIncident Response
Pro featureDetermine in minutes whether your security incident requires HIPAA breach notification, with a downloadable incident report.
Open Breach CheckerUse cases
Pick your role and jump straight to practical implementation articles.
Operational intelligence for provider organizations, plans, and care teams.
Hands-on guidance for SaaS, IT vendors, and downstream subcontractors.
Program-building playbooks for audits, risk management, and governance.