HIPAA compliance, simplifiedUpdated today

HIPAA compliance for your practice, handled.

Built for healthcare organizations that need real answers, not legal jargon. Get instant HIPAA guidance, generate compliant documents in minutes, track enforcement actions, and train your staff, all in one place.

Ask a HIPAA question Browse insights

Designed for 6M+ HIPAA-covered entities
Updated daily from OCR & HHS
100% client audit pass rate

Everything in one place

New to HIPAA?

Not sure where to start? We've got you.

Plain English HIPAA guidance for every role at your organization. No prior compliance experience needed.

Explore HIPAA Basics →

I'm front desk staff →I'm a practice manager →I'm a healthcare provider →I'm a software vendor →

Regulations Monitored: 14,800+
OCR Penalties Catalogued: $134M
Updates This Quarter: 847
HIPAA-Covered Entities: 6M+

221 enforcement actions tracked · $120.8M in total penalties · Updated weekly

Open Enforcement Hub

Latest insights

What you need to know this week

Browse insights View all enforcement actions →

Data Breach

Pharmacy Benefit Manager MedImpact Healthcare Systems Begins Notifying Patients of October 2025 Network Intrusion; Healthcare Software Firm Rosch Visionary Systems Also Discloses Breach

MedImpact Healthcare Systems, a large pharmacy benefit management business associate, began mailing breach notification letters in September 2026 for a network intrusion that occurred in October 2025. The nearly year-long gap between incident and notification raises serious HIPAA breach notification rule compliance questions.

Sep 25, 2026·6 min read

Read item

Data Breach

Aesto Health AWS Breach Hits HHS Portal at 9.54 Million Patients Across 30 Provider Clients, Including Everside Health

A cyberattack on Aesto Health's Amazon Web Services infrastructure exposed the records of roughly 9.54 million patients across 30 covered entity clients. Here is what compliance officers need to know about third-party risk, BAA oversight, and the breach timeline.

Sep 4, 2026·6 min read

Read item

Data Breach

TheGentlemen Ransomware Group Threatens Nutex Health's 27-Hospital Network; Class Action Filed Days After SEC Disclosure

TheGentlemen ransomware group has claimed an attack on Nutex Health and is threatening to publish stolen patient data. A class action lawsuit was filed in Texas just three days after Nutex's SEC 8-K disclosure, raising urgent questions about hospital-sector ransomware liability.

Sep 4, 2026·4 min read

Read item

OCR Enforcement

OCR Settles with California Eye Care Provider Azul Vision for Failure to Provide Timely Patient Record Access — 55th Right of Access Enforcement Action

OCR's 55th Right of Access settlement targets Azul Vision, a California optometry and ophthalmology practice, for failing to provide a patient her records within the required 30-day window. Here is what compliance officers need to know.

Aug 28, 2026·5 min read

Read item

Browse insights View all enforcement actions →

Compliance Tools