Blog
HIPAA email, fax, and forms for clinic teams
Practical articles on the communication work physician offices already do: healthcare email, cloud fax, and personalized intake, with a BAA and an audit trail.
Social media replies and the PHI hiding in public comments
A kind public reply can still identify a patient and their condition. Train staff to move the conversation to a secure channel.
How to handle a HIPAA incident that started in an inbox
A misdirected referral is an incident first. Whether it becomes a reportable breach depends on what you do in the next hours.
BAA checklist for email, fax, and form vendors
If a vendor creates, receives, maintains, or transmits PHI for you, you need a Business Associate Agreement before go-live.
Personalized patient intake forms that stay HIPAA-compliant
Specialty-specific intake should not mean a paper clipboard or a generic form tool without a BAA.
Secure cloud fax for clinics in 2026: why the machine is still there
Referrals, prior auths, and hospital packets still arrive by fax. The risk is the analog machine, not the document type.
Why consumer email is not enough for PHI
TLS on Gmail or Outlook does not replace a BAA, retention you can explain, or controls that stop auto-forwarding to a personal phone.
HIPAA-compliant email for small medical practices
What independent clinics actually need from healthcare email: a BAA, encryption, an audit trail, and a staff inbox people will use.