Built for healthcare organizations that need real answers, not legal jargon. Get instant HIPAA guidance, generate compliant documents in minutes, track enforcement actions, and train your staff, all in one place.
Everything in one place
New to HIPAA?
Plain English HIPAA guidance for every role at your organization. No prior compliance experience needed.
Explore HIPAA Basics →Federal & state healthcare privacy statutes
Enforcement actions since HITECH Act
Guidance memos, alerts & rule changes
Practices, health systems, payers & vendors
222 enforcement actions tracked · $120.8M in total penalties · Updated weekly
Open Enforcement HubLatest insights
A Texas Attorney General report reveals the 2025 Oracle Health cyberattack on legacy Cerner servers may have compromised nearly 20 million people, raising serious HIPAA business associate liability questions for hospital customers nationwide.
Ohio-based Saber Healthcare, California law firm Buchalter, and Indiana dental practice Bright Smile Dental Care have each disclosed HIPAA-reportable incidents. Here is what compliance teams need to know.
The District of Columbia Department of Health Care Finance disclosed that Medicaid beneficiary data was publicly accessible online for roughly three years, affecting nearly 400,000 enrollees. Here is what compliance officers need to know.
MedImpact Healthcare Systems, a large pharmacy benefit management business associate, began mailing breach notification letters in September 2026 for a network intrusion that occurred in October 2025. The nearly year-long gap between incident and notification raises serious HIPAA breach notification rule compliance questions.
Compliance Tools
Purpose-built compliance tools for assessment, documentation, and incident readiness.
BAA Workflow
Free with accountDraft HIPAA-oriented BAA language with structured clauses for security obligations, incident notice, and subcontractor flow-down terms.
Open BAA GeneratorSecurity Rule
Run a weighted HIPAA Security Rule assessment and generate a downloadable PDF report with prioritized remediation actions.
Run Risk AssessmentIncident Response
Pro featureDetermine in minutes whether your security incident requires HIPAA breach notification, with a downloadable incident report.
Open Breach CheckerUse cases
Pick your role and jump straight to practical implementation articles.
Operational intelligence for provider organizations, plans, and care teams.
Hands-on guidance for SaaS, IT vendors, and downstream subcontractors.
Program-building playbooks for audits, risk management, and governance.