--- title: Healthcare Compliance | Help Center description: "Find guidance, updates, overviews, hints and enforcement details in these subject areas: Privacy, Data Security, Workplace Safety, Clinical & Quality, State Requirements, FWA and Compliance Operations" --- [Skip to content](https://knowledge.compliancygroup.com/home/healthcare-compliance#main-content) English - United States Show submenu for translations [Submit a Ticket](https://knowledge.compliancygroup.com/home/kb-tickets/new) [Go To Customer Portal](https://help.compliancygroup.com/home) ![Compliancy Group](https://knowledge.compliancygroup.com/hs-fs/hubfs/Compliancy%20Group%20Logo%20Full%20RBG-sized.png?width=300&height=54&name=Compliancy%20Group%20Logo%20Full%20RBG-sized.png) Open main navigation Close main navigation - English - United States Show submenu for translations - [Submit a Ticket](https://knowledge.compliancygroup.com/home/kb-tickets/new) - [Go To Customer Portal](https://help.compliancygroup.com/home) How can we help you? - There are no suggestions because the search field is empty. 1. [Help Center](https://knowledge.compliancygroup.com/home) 2. [Healthcare Compliance](https://knowledge.compliancygroup.com/home/healthcare-compliance) # Healthcare Compliance Find guidance, updates, overviews, hints and enforcement details in these subject areas: Privacy, Data Security, Workplace Safety, Clinical & Quality, State Requirements, FWA and Compliance Operations - [Compliance Operations Overview: What is the No Surprises Act?](https://knowledge.compliancygroup.com/home/compliance-operations-what-is-the-no-surprises-act) ## Privacy - [Privacy Overview: Comprehensive Guide to the HIPAA Notice of Privacy Practices](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259993-comprehensive-guide-to-the-hipaa-notice-of-privacy-practices) - [Privacy Guidance: Independent Contractor vs. HIPAA Workforce Member Classification Guide](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001205794-independent-contractor-vs-hipaa-workforce-member-classification-guide) - [Privacy Guidance: Do Patients Have the Right to Request Amendment of Their PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247495-do-patients-have-the-right-to-request-amendment-of-their-phi-) - [Privacy Guidance: What is a Covered Entity Under HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249712-what-is-a-covered-entity-under-hipaa-) - [Privacy Overview: Comprehensive Guide - What Happens After a HIPAA Complaint is Filed?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001260723-comprehensive-guide-what-happens-after-a-hipaa-complaint-is-filed-) - [Privacy Guidance: What is Verification of Identity and Authority Under the HIPAA Privacy Rule?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001248575-what-is-verification-of-identity-and-authority-under-the-hipaa-privacy-rule-) - [Privacy Overview: What is the HIPAA Privacy Rule?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001274069-what-is-the-hipaa-privacy-rule-) - [Privacy Guidance: What are the Rules on HIPAA and Research: Is a Researcher Covered by HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250045-what-are-the-rules-on-hipaa-and-research-is-a-researcher-covered-by-hipaa-) - [Privacy Guidance: What are the HIPAA Rules on Fundraising?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247401-what-are-the-hipaa-rules-on-fundraising-) - [Privacy Guidance: What is a HIPAA Business Associate Agreement?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001267583-what-is-a-hipaa-business-associate-agreement-) - [Privacy Guidance: What are Treatment, Payment, and Healthcare Operations Activities Under HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001248390-what-are-treatment-payment-and-healthcare-operations-activities-under-hipaa-) - [Privacy Guidance: What is a HIPAA Business Associate Subcontractor Agreement?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247304-what-is-a-hipaa-business-associate-subcontractor-agreement-) - [Privacy Guidance: Does the HIPAA Privacy Rule Apply to an Elementary or Secondary School?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001248660-hipaa-ferpa-and-student-medical-records) - [Privacy. Guidance: Right to Request Communications of PHI By Alternative Means or at Alternative Locations](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249849-right-to-request-communications-of-phi-by-alternative-means-or-at-alternative-locations) - [Privacy Guidance: What is HIPAA Social Media Compliance?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246086-what-is-hipaa-social-media-compliance-) - [Privacy Guidance: When Can PHI Disclosures be Made for Judicial and Administrative Proceedings?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246083-when-can-phi-disclosures-be-made-for-judicial-and-administrative-proceedings-) - [Privacy Guidance: HIPAA and Workplace Wellness Programs](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001251407-hipaa-and-workplace-wellness-programs) - [Privacy Guidance: What are Credentialing Activities Under HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249729-what-are-credentialing-activities-under-hipaa-) - [Privacy Guidance: What is the HIPAA Right of Access and When Must Covered Entities Respond to Right of Access Requests?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001248383-what-is-the-hipaa-right-of-access-and-when-must-covered-entities-respond-to-right-of-access-requests-) - [Privacy Guidance: Who Must be Notified of a Breach and What Information Must the Notification Contain?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001245839-who-must-be-notified-of-a-breach-and-what-information-must-the-notification-contain-) - [Privacy Guidance: What are the HIPAA Rules on Marketing?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247405-what-are-the-hipaa-rules-on-marketing-) - [HIPAA Guidance: HIPAA Privacy Rule - Right to Request Restriction of Uses and Disclosures of PHI](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249844-hipaa-privacy-rule-right-to-request-restriction-of-uses-and-disclosures-of-phi) - [Privacy Guidance: What is an Accounting of Disclosures of PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246093-what-is-an-accounting-of-disclosures-of-phi-) - [Privacy Guidance: What are the HIPAA Rules for the Disposal of PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001253443-what-are-the-hipaa-rules-for-the-disposal-of-phi-) - [Privacy Overview: Who is Regulated by HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250826-who-is-regulated-by-hipaa-) - [Privacy Guidance: What are Incidental Uses and Disclosures of PHI Under HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249946-what-are-incidental-uses-and-disclosures-of-phi-under-hipaa-) - [Privacy Guidance: How to File a HIPAA Privacy or Security Complaint](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249985-how-to-file-a-hipaa-privacy-or-security-complaint) - [Privacy Guidance: What are the HIPAA Rules on the Sale of PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247408-what-are-the-hipaa-rules-on-the-sale-of-phi-) - [Privacy Guidance: What is a HIPAA Business Associate or Vendor?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001178575-what-is-a-hipaa-business-associate-or-vendor-) - [Privacy Guidance: What is a HIPAA Hybrid Entity?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001248379-what-is-a-hipaa-hybrid-entity-) - [Privacy Guidance: What is the HIPAA Breach Notification Rule?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001274070-what-is-the-hipaa-breach-notification-rule-) - [Privacy Guidance: What is the HIPAA Privacy Rule Right of Access? A Guide to What May be Requested and Accessed](https://knowledge.compliancygroup.com/home/what-is-the-hipaa-privacy-rule-right-of-access-a-guide-to-what-may-be-requested-and-accessed) - [Privacy Guidance: A Comprehensive Guide to HIPAA Patient Authorization Requirements](https://knowledge.compliancygroup.com/home/a-comprehensive-guide-to-hipaa-patient-authorization-requirements) - [Privacy Guidance: Can My Organization Appoint an Outside Person as the HIPAA Privacy Official or HIPAA Security Official?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246927-can-my-organization-appoint-an-outside-person-as-the-hipaa-privacy-official-or-hipaa-security-officia) - [Privacy Guidance: Classifying Medical Device Companies under HIPAA](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247497-classifying-medical-device-companies-under-hipaa) - [Privacy Guidance: Are Laboratories Covered Entities Under HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001257026-are-laboratories-covered-entities-under-hipaa-) - [Privacy Overview: What is PHI? HIPAA Key Definitions to Understanding PHI](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246472-what-is-phi-hipaa-key-definitions-to-understanding-what-phi-is-health-information-individually-ide) - [Privacy Guidance: What are HIPAA Psychotherapy Notes? Behavioral Health and Mental Health Provider Terms](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247110-what-are-hipaa-psychotherapy-notes-behavioral-health-and-mental-health-provider-terms) - [Privacy Guidance: Are Disability Insurance Companies and Other Insurance Benefits Companies Covered Entities under HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247500-are-disability-insurance-companies-and-other-insurance-benefits-companies-covered-entities-under-hipa) - [Privacy Guidance: When are Business Associates Directly Liable for HIPAA Violations?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259478-when-are-business-associates-directly-liable-for-hipaa-violations-) - [Privacy Guidance: What are the HIPAA Rules on Use and Disclosure of Genetic Information?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247926-what-are-the-hipaa-rules-on-use-and-disclosure-of-genetic-information-) - [Privacy Guidance: Must a Patient Sign a Notice of Privacy Practices or Acknowledgment of Receiving the NPP?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001273527-must-a-patient-sign-a-notice-of-privacy-practices-or-acknowledgment-of-receiving-the-npp-) - [Privacy Guidance: Who Can Access or Receive the PHI of Deceased Individuals?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246408-who-can-access-or-receive-the-phi-of-deceased-individuals-) - [Privacy Guidance: When is a Healthcare Provider a Covered Entity Under HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001251341-when-is-a-healthcare-provider-a-covered-entity-under-hipaa-) - [Privacy Guidance: When Does the Privacy Rule Allow Covered Entities to Disclose PHI to Law Enforcement?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001248392-when-does-the-privacy-rule-allow-covered-entities-to-disclose-phi-to-law-enforcement-) - [Privacy Guidance: What is the HIPAA Privacy Rule Training Requirement?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249986-what-is-the-hipaa-privacy-rule-training-requirement-) - [Privacy Guidance: What is the Relationship Between HIPAA and Workers' Compensation?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246070-what-is-the-relationship-between-hipaa-and-workers-compensation-) - [Privacy Guidance: What is a HIPAA Privacy Official?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249458-what-is-a-hipaa-privacy-official-) - [Privacy Guidance: What are the Sanctions Requirements Under the HIPAA Privacy Rule?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249990-what-are-the-sanctions-requirements-under-the-hipaa-privacy-rule-) - [Privacy Guidance: What are the HIPAA Obligations of a Covered Entity With Respect to Research?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250046-what-are-the-hipaa-obligations-of-a-covered-entity-with-respect-to-research-) - [Privacy Guidance: What is the Difference Between "Uses" of PHI and "Disclosures" of PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001253680-what-is-the-difference-between-uses-of-phi-and-disclosures-of-phi-) - [Privacy Guidance: When is a Privacy or Security Incident Not Required to be Reported Under HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249673-when-is-a-data-breach-not-required-to-be-reported-under-hipaa-) - [Privacy Guidance: When May a Covered Entity Deny a Patient Request to Amend PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247496-when-may-a-covered-entity-deny-a-patient-request-to-amend-phi-) - [Privacy Guidance: What is a HIPAA Notice of Privacy Practices?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001245841-what-is-a-hipaa-notice-of-privacy-practices-) - [Privacy Guidance: What is a Confidentiality Agreement?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249607-what-is-a-confidentiality-agreement-) - [Privacy Guidance: What is the HIPAA Minimum Necessary Standard?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001274120-what-is-the-hipaa-minimum-necessary-standard-) - [Privacy Guidance: What are the HIPAA Breach Notification Letter Requirements?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001274125-what-are-the-hipaa-breach-notification-letter-requirements-) - [Privacy Guidance: HIPAA Myth - "There are Four HIPAA Rules"](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001254769-hipaa-myth-there-are-four-hipaa-rules-) - [Privacy Guidance: Minor Children and Parental Rights to PHI](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001245298-minor-children-and-parental-rights-to-phi) - [Privacy Guidance: What are Medical Record and Other Record Retention Requirements Under HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246280-what-are-medical-record-and-other-record-retention-requirements-under-hipaa-) - [Privacy Guidance: What is "Mitigation" under the HIPAA Privacy Rule?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249392-what-is-mitigation-under-the-hipaa-privacy-rule-) - [Privacy Guidance: When is a Vendor of a Covered Entity Not a Business Associate?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001251352-when-is-a-vendor-of-a-covered-entity-not-a-business-associate-) - [Privacy Guidance: What are Limited Data Sets and Data Use Agreements?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247106-what-are-limited-data-sets-and-data-use-agreements-) - [Privacy Guidance: What is De-identified PHI and What is Re-identified PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247945-what-is-de-identified-phi-and-what-is-re-identified-phi-) - [Privacy Guidance: What is a HIPAA Authorization for Uses and Disclosures of PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250189-what-is-a-hipaa-authorization-for-uses-and-disclosures-of-phi-) - [Privacy Guidance: Does HIPAA Impose Requirements on Mailing PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247196-does-hipaa-impose-requirments-on-the-mailing-of-phi-) - [Privacy Guidance: What is the Difference Between a Business Associate and a Business Associate Subcontractor?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001252450-what-is-the-difference-between-a-business-associate-and-a-business-associate-subcontractor-) - [Privacy Guidance: What is a Designated Record Set?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250144-what-is-a-designated-record-set-) - [Privacy Overview: How Does the HIPAA Privacy Rule Protect the Confidentiality of PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001179152-how-does-the-hipaa-privacy-rule-protect-the-confidentiality-of-phi-) - [Privacy Guidance: What is the HIPAA Privacy Rule Documentation Requirement?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249987-what-is-the-hipaa-privacy-rule-documentation-requirement-) - [Privacy Guidance: Filing a Complaint With a HIPAA-Covered Entity](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001248867-filing-a-complaint-with-a-hipaa-covered-entity) - [Privacy Guidance: What are the HIPAA Rules on Surveillance Cameras and Recording?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246294-what-are-the-hipaa-rules-on-surveillance-cameras-and-recording-) - [Privacy Guidance: When is a Business Associate Agreement NOT Required?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001252686-when-is-a-business-associate-agreement-not-required-) - [Privacy Overview: Negotiating Business Associate Agreements - General Information](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249408-negotiating-business-associate-agreements-general-information) - [Privacy Guidance: What is the HHS HIPAA Final Rule to Support Reproductive Healthcare Privacy?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001255478-what-is-the-hhs-hipaa-final-rule-to-support-reproductive-healthcare-privacy-) - [Privacy Guidance: Do Consumers and Would-Be Patients Create PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001253655-do-consumers-and-would-be-patients-create-phi-) - [Privacy Guidance: Does HIPAA Apply to Employee Health Information Maintained by Employers?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247996-does-hipaa-apply-to-employee-health-information-maintained-by-employers-) - [Privacy Overview: Introduction to HIPAA](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001245853-introduction-to-hipaa) - [Privacy Guidance: Breach Notification Rule and Rendering Unsecured PHI Unusable, Unreadable, or Indecipherable to Unauthorized Individuals](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249411-breach-notification-rule-guidance-to-render-unsecured-phi-unusable-unreadable-or-indecipherable-to) - [Privacy Guidance: What Fees May Covered Entities Charge Individuals for Copies of their PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001248384-what-fees-may-covered-entities-charge-individuals-for-copies-of-their-phi-) - [Privacy Overview: Comprehensive Guide to HIPAA and Confidentiality Agreements](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001260387-comprehensive-guide-to-hipaa-and-confidentiality-agreements) - [Privacy Guidance: What are the Content Requirements for the Revised Notice of Privacy Practices?](https://knowledge.compliancygroup.com/home/privacy-guidance-what-are-the-content-requirements-for-the-revised-notice-of-privacy-practices-) See less ▼ ## Data Security - [Data Security Update: What are the Proposed Updates to the HIPAA Security Rule?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001273528-what-are-the-proposed-updates-to-the-hipaa-security-rule-) - [Data Security Guidance: The Difference Between the Proposed HIPAA Security Rule Update and an Actual Rule Change](https://knowledge.compliancygroup.com/home/data-security-guidance-the-difference-between-the-proposed-hipaa-security-rule-update-and-an-actual-rule-change) - [Data Security Guidance: Job Aid for Analysis of Security of PHI](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001193188-job-aid-for-analysis-of-security-of-phi) - [Data Security Guidance: What is a HIPAA Security Official?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001255898-what-is-a-hipaa-security-official-) - [Data Security Guidance: What are the HIPAA Security Rule Incident Response and Reporting Requirements?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249991-what-are-the-hipaa-security-rule-incident-response-and-reporting-requirments-) - [Data Security Guidance: What are HIPAA Data Backup Requirements?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250739-what-are-hipaa-data-backup-requirements-) - [Data Security Guidance: What is "Information System Activity Review" Under the HIPAA Security Rule?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250832-what-is-information-system-activity-review-under-the-hipaa-security-rule-) - [Data Security Guidance: What is the HIPAA Security Rule Authentication Standard?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250135-what-is-the-hipaa-security-rule-authentication-standard-) - [Data Security Overview: What is Protected Health Information (PHI) & Electronic Protected Health Information (ePHI)?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001178584-what-is-protected-health-information-phi-electronic-protected-health-information-ephi-) - [Data Security Guidance: What is the Integrity of ePHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001274115-what-is-the-integrity-of-ephi-) - [Data Security Overview: What are the General Requirements of the HIPAA Security Rule?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246475-what-are-the-general-requirements-of-the-hipaa-security-rule-) - [Data Security Guidance: What are the HIPAA Security Rule Documentation Requirements?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001255589-what-are-the-hipaa-security-rule-documentation-requirements-) - [Data Security Guidance: What are the HIPAA Security Rule Physical Safeguards? Device and Media Controls](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001253014-what-are-the-hipaa-security-rule-physical-safeguards-device-and-media-controls) - [Data Security Guidance: May a HIPAA-Covered Entity Use a CSP That Stores ePHI on Servers Outside of the United States?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250134-may-a-hipaa-covered-entity-use-a-csp-that-stores-ephi-on-servers-outside-of-the-united-states-) - [Data Security Guidance: How to Implement Patching](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001218922-how-to-implement-patching) - [Data Security Guidance: What are the HIPAA Security Rule Physical Safeguards? Facility Access Controls](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001252847-what-are-the-hipaa-security-rule-physical-safeguards-facility-access-controls) - [Data Security Guidance: Where Can I Find Federal Government Cybersecurity Resources and Guidelines?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249532-where-can-i-find-federal-government-cybersecurity-resources-and-guidelines) - [Data Security Guidance: What are HIPAA Security Rule Audit Controls, Audit Logs, and Audit Trails?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246387-what-are-hipaa-security-rule-audit-controls-audit-logs-and-audit-trails-) - [Data Security Guidance: What is Multi-Factor Authentication (MFA)?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001253502-what-is-multi-factor-authentication-mfa-) - [Data Security Guidance: What are the HIPAA Security Rule Physical Safeguards? Workstation Use Controls](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001252974-what-are-the-hipaa-security-rule-physical-safeguards-workstation-use-controls) - [Data Security Guidance: What is the HIPAA Security Rule Evaluation Standard?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001252845-what-is-the-hipaa-security-rule-evaluation-standard-) - [Data Security Guidance: Threat # 3 of the Top 5 Threats Facing the Healthcare Sector - Loss or Theft of Equipment or Data](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001275141-threat-3-of-the-top-5-threats-facing-the-healthcare-sector-loss-or-theft-of-equipment-or-data) - [Data Security Guidance: How to Conduct a Security Risk Analysis](https://knowledge.compliancygroup.com/home/how-to-conduct-a-security-risk-analysis) - [Data Security Guidance: Threat # 2 of the Top 5 Threats Facing the Healthcare Sector - Ransomware](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250044-threat-2-of-the-top-5-threats-facing-the-healthcare-sector-ransomware) - [Data Security Guidance: Threat #1 of the Top 5 Threats Facing the Healthcare Sector - Social Engineering](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250043-threat-1-of-the-top-5-threats-facing-the-healthcare-sector-social-engineering) - [Data Security Overview: HIPAA and Encryption: A Guide](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259337-hipaa-and-encryption-a-guide) - [Data Security Guidance: What are Vulnerability Scans?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246396-what-are-vulnerability-scans-) - [Data Security Guidance: Does the HIPAA Security Rule Require Employee Background Checks?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246391-does-the-hipaa-security-rule-require-employee-background-checks-) - [Data Security Guidance: Cybersecurity and Single Sign-On](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001273786-cybersecurity-and-single-sign-on-sso-) - [Data Security Overview: HIPAA Facility Alarm and Alarm System Requirements](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246932-am-i-required-to-have-an-alarm-alarm-system-for-my-facility-under-the-hipaa-regulations-) - [Data Security Guidance: What are the HIPAA Security Rule's "Required" vs. "Addressable" Standards?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001255704-what-are-the-hipaa-security-rule-s-required-vs-addressable-standards-) - [Data Security Guidance: What are Workforce Sanctions Policies Under the HIPAA Security Rule?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247423-what-are-workforce-sanctions-policies-under-the-hipaa-security-rule-) - [Data Security Guidance: What are Best Practices for Password Selection?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250136-what-are-best-practices-for-password-selection-) - [Data Security Guidance: What are HIPAA Security Rule Integrity Controls?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001251123-what-are-hipaa-security-rule-integrity-controls-) - [Date Security Guidance: What are the Components of a HIPAA Contingency Plan?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246388-what-are-the-components-of-a-hipaa-contingency-plan-) - [Data Security Guidance: The HIPAA Right of Access Rule, Encryption, and Texting or Emailing of PHI](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246245-the-hipaa-right-of-access-rule-encryption-and-texting-or-emailing-of-phi) - [Data Security Guidance: What is Risk Management Under the HIPAA Security Rule?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250828-what-is-risk-management-under-the-hipaa-security-rule-) - [Data Security Overview: What is the Confidentiality of ePHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001274072-what-is-the-confidentiality-of-ephi-) - [Data Security Guidance: What is the HIPAA Security Rule Security Awareness and Training Standard?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001253016-what-is-the-hipaa-security-rule-security-awareness-and-training-standard-) - [Data Security Guidance: What Is The HIPAA Security Rule Information Access Management Standard?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249840-what-is-the-hipaa-security-rule-information-access-management-standard-) - [Data Security Guidance: Are HIPAA-Covered Entities Required to Purchase Cybersecurity Insurance?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001248043-are-hipaa-covered-entities-required-to-purchase-cyber-insurance-) - [Data Security Overview: What is the HIPAA Security Rule?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001274073-what-is-the-hipaa-security-rule-) - [Data Security Guidance: What are the Proper Methods for ePHI Disposal and Destruction?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001254241-what-are-the-proper-methods-for-ephi-disposal-and-destruction-) - [Data Security Guidance: What are the Security Rule Key Terms and Definitions?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246473-what-are-the-security-rule-key-terms-and-definitions-) - [Data Security Guidance: Threat # 5 of the Top 5 Threats Facing the Healthcare Sector - Insider, Accidental, or Malicious Data Loss](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001275148-threat-5-of-the-top-5-threats-facing-the-healthcare-sector-attacks-against-network-connected-medic) - [Data Security Guidance: What is the Availability of ePHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001274121-what-is-the-availability-of-ephi-) - [Data Security Guidance: What is the HIPAA Security Rule Transmission Security Standard?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001253017-what-is-the-hipaa-security-rule-transmission-security-standard-) - [Data Security Guidance: Federal Government Cybersecurity Resources: The 405(d) Program and HICP](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250040-federal-government-cybersecurity-resources-the-405-d-program-and-hicp) - [Overview: What is a Security Risk Assessment (SRA)?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001179148-what-is-a-security-risk-assessment-sra-) - [Data Security Guidance: What is a HIPAA IT Disaster Recovery Plan?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001273534-what-is-a-hipaa-it-disaster-recovery-plan-) - [Data Security Guidance: What is the HIPAA Security Rule Workforce Security Standard?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001251122-what-is-the-hipaa-security-rule-workforce-security-standard-) - [Data Security Guidance: What are the HIPAA Security Rule Physical Safeguards? Workstation Security Controls](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001252975-what-are-the-hipaa-security-rule-physical-safeguards-workstation-security-controls) - [Data Security Guidance: Threat # 4 of the Top 5 Threats Facing the Healthcare Sector - Insider, Accidental, or Malicious Data Loss](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001275145-threat-4-of-the-top-5-threats-facing-the-healthcare-sector-insider-accidental-or-malicious-data-lo) - [Data Security Guidance: HIPAA and Virtual Private Networks](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001253353-hipaa-and-virtual-private-networks-vpns-) See less ▼ ## OSHA Workplace Safety - [OSHA Workplace Safety Guidance: Where Can I Find the Safety Data Sheet (SDS) for a Hazardous Chemical?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246998-where-can-i-find-the-safety-data-sheet-sds-for-a-hazardous-chemical-) - [OSHA Workplace Safety Overview: Commonly Asked Questions](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001260995-osha-safety-standards-commonly-asked-questions) - [OSHA Workplace Safety Guidance: Does OSHA Apply to Workers Who Work from Home or Offsite?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001248745-does-osha-apply-to-workers-who-work-from-home-or-offsite-) - [OSHA Workplace Safety Guidance: What OSHA Records May an Employee Access?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246803-what-osha-records-may-an-employee-access-) ## Clinical & Quality - [Clinical & Quality Guidance: Are Accreditation Organizations Business Associates of the Covered Entities They Accredit?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249716-are-accreditation-organizations-business-associates-of-the-covered-entities-they-accredit-) - [Clinical & Quality Guidance: HIPAA and Job Shadowing](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249658-hipaa-and-job-shadowing) - [Clinical & Quality Guidance: How Can Providers Educate Patients on the Risks of Telehealth?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001247279-how-can-providers-educate-patients-on-the-risks-of-telehealth-) ## State Requirements - [State Requirements Guidance: What is "Sensitive Personal Information" Under HB 300?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001260575-what-is-sensitive-personal-information-under-hb-300-) - [State Requirements Guidance: What Penalties Does a TMRPA Covered Entity Face for an HB 300 Violation?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001260577-what-penalties-does-a-tmrpa-covered-entity-face-for-an-hb-300-violation-) - [State Requirements Guidance: What are the Texas Medical Records Privacy Act Marketing Rules?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259425-what-are-the-texas-medical-records-privacy-act-marketing-rules-) - [State Requirement Guidance: Does the Texas Medical Records Privacy Act (TMRPA) Permit Reidentification of PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259423-does-the-texas-medical-records-privacy-act-tmrpa-permit-reidentification-of-phi-) - [State Requirement Guidance: Does Texas HB 300 Permit the Sale of PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259426-does-texas-hb-300-permit-the-sale-of-phi-) - [State Requirements Guidance: What are the Texas HB 300 Training Requirements?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259414-what-are-the-texas-hb-300-training-requirements-) - [State Requirements Guidance: What are the Texas HB 300 Rules on Electronic Disclosure of PHI?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259427-what-are-the-texas-hb-300-rules-on-electronic-disclosure-of-phi-) - [State Requirement Guidance: Can An Entity Be Covered by the Texas Medical Records Privacy Act and Not by HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001254106-can-an-entity-be-covered-by-the-texas-medical-records-privacy-act-and-not-by-hipaa-) - [State Requirements Guidance: Who Does HB 300 Apply To?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259404-who-does-hb-300-apply-to-) - [State Requirements Guidance: How Long Do Texas HB 300-Covered Entities Have To Respond to EHR (Electronic Health Record) Requests?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259422-how-long-do-texas-hb-300-covered-entities-have-to-respond-to-ehr-electronic-health-record-requests-) - [State Requirements Guidance: What Entities are Exempt from the Texas Medical Records Privacy Act?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259428-what-entities-are-exempt-from-the-texas-medical-records-privacy-act-) See less ▼ ## Fraud, Waste & Abuse - [Fraud, Waste & Abuse Guidance: Exclusion Monitoring](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001264835-exclusion-monitoring) - [Fraud, Waste & Abuse Guidance: What is the Federal Exclusion Statute?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001249715-what-is-the-federal-exclusion-statute-) ## Compliance Operations - [Compliance Operations: What is the Emergency Medical Treatment and Labor Act (EMTALA)?](https://knowledge.compliancygroup.com/home/compliance-operations-what-is-the-emergency-medical-treatment-and-labor-act-emtala) - [Compliance Operations Overview: What are False Claims Act and Qui Tam Lawsuits?](https://knowledge.compliancygroup.com/home/compliance-operations-overview-what-are-false-claims-act-and-qui-tam-lawsuits) - [Compliance Operations Overview: Update on the 2024 EEOC Enforcement Guidance on Harassment in the Workplace](https://knowledge.compliancygroup.com/home/what-is-the-status-of-the-2024-eeoc-enforcement-guidance-on-workplace-harassment) - [Compliance Operations Overview: What are the Information Blocking Regulations?](https://knowledge.compliancygroup.com/home/compliance-operations-what-are-the-information-blocking-regulations) - [Compliance Operation Tip: Completing The Breach Determination Assessment Form](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001193187-completing-the-breach-determination-assessment-form) - [Compliance Operations Tip: What is HHS' Guidance on the Use of Online Tracking Technologies?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001255845-what-is-hhs-guidance-on-the-use-of-online-tracking-technologies-) - [Compliance Operations Tip: Where Are HHS Resources for the Change Healthcare Cyberattack?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001255857-where-are-hhs-resources-for-the-change-healthcare-cyberattack-) - [Compliance Operations Tip: What is the Difference Between an OCR HIPAA Settlement and an OCR HIPAA Fine (Civil Monetary Penalty)?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001250600-what-is-the-difference-between-an-ocr-hipaa-settlement-and-an-ocr-hipaa-fine-civil-monetary-penalty-) - [Compliance Operation Tip: Compliancy Group's HHS OCR HIPAA Audit Response Program](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246029-compliancy-group-s-hhs-ocr-hipaa-audit-response-program) - [Compliance Operations Tip: How Can I Use Compliancy Group's Software, The Guard, to Work on My HIPAA Security Risk Assessment?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001273549-how-can-i-use-compliancy-group-s-software-the-guard-to-work-on-my-hipaa-security-risk-assessment-) - [Compliance Operations Tip: Where Can I Find Federal Government and HHS Resources for HIPAA?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001274819-where-can-i-find-federal-government-and-hhs-resources-for-hipaa-) - [Compliance Operations Tip: Am I Required to Certify My Organization's HIPAA Compliance?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259363-am-i-required-to-certify-my-organization-s-hipaa-compliance-) - [Compliance Operations Tip: Does HIPAA Address Continuing Education (CE, CME) or Continuing Education Accreditation Requirements?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001259243-does-hipaa-address-continuing-education-ce-cme-or-continuing-education-accreditation-requirements-) - [Compliance Operations Overview: What is MACRA MIPS?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001246012-what-is-macra-mips-new-for-2024-25-) - [Compliance Operations Overview: What are the Differences Between "Policies" and "Procedures"?](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001245736-what-are-the-differences-between-policies-and-procedures-) - [Compliance Operations Overview: The Seven Fundamental Elements of an Effective Compliance Program](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001245294-the-seven-fundamental-elements-of-an-effective-compliance-program) - [Compliance Operations Tip: Forms Required by HIPAA and Forms Not Mentioned or Required by HIPAA](https://knowledge.compliancygroup.com/home/support/solutions/articles/48001273531-what-forms-are-hipaa-forms-and-what-forms-are-not-hipaa-forms-) See less ▼ - [Getting started](https://knowledge.compliancygroup.com/home/getting-started#main-content) - [Onboarding](https://knowledge.compliancygroup.com/home/getting-started#onboarding) - [Product Overviews](https://knowledge.compliancygroup.com/home/getting-started#product-overviews) - [Workforce](https://knowledge.compliancygroup.com/home/workforce#main-content) - [Policies](https://knowledge.compliancygroup.com/home/workforce#policies) - [Settings Module](https://knowledge.compliancygroup.com/home/workforce#settings-module) - [3rd Party Risk](https://knowledge.compliancygroup.com/home/3rd-party-risk) - [Incident Management](https://knowledge.compliancygroup.com/home/incident-management) - [Risks & Assessments](https://knowledge.compliancygroup.com/home/risks-assessments) - [Healthcare Compliance](https://knowledge.compliancygroup.com/home/healthcare-compliance#main-content) - [Privacy](https://knowledge.compliancygroup.com/home/healthcare-compliance#privacy) - [Data Security](https://knowledge.compliancygroup.com/home/healthcare-compliance#data-security) - [OSHA Workplace Safety](https://knowledge.compliancygroup.com/home/healthcare-compliance#osha-workplace-safety) - [Clinical & Quality](https://knowledge.compliancygroup.com/home/healthcare-compliance#clinical-quality) - [State Requirements](https://knowledge.compliancygroup.com/home/healthcare-compliance#state-requirements) - [Fraud, Waste & Abuse](https://knowledge.compliancygroup.com/home/healthcare-compliance#fraud-waste-abuse) - [Compliance Operations](https://knowledge.compliancygroup.com/home/healthcare-compliance#compliance-operations) - [Legacy Guard Features](https://knowledge.compliancygroup.com/home/legacy-guard-features#main-content) - [Admin - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features#admin-legacy) - [Assets - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features#assets-legacy) - [Documents - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features#documents-legacy) - [Incidents - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features#incidents-legacy) - [My Documents - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features#my-documents-legacy) - [My Tasks - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features#my-tasks-legacy) - [People - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features#people-legacy) - [Programs - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features#programs-legacy) - [Reports - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features#reports-legacy) - [The Dashboard - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features#the-dashboard-legacy) - [Training - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features#training-legacy) - [Vendors - Legacy](https://knowledge.compliancygroup.com/home/legacy-guard-features#vendors-legacy) - [Account & Billing](https://knowledge.compliancygroup.com/home/account-billing) - [The Guard Support](https://knowledge.compliancygroup.com/home/the-guard-support#main-content) - [P&P Drafts](https://knowledge.compliancygroup.com/home/the-guard-support#pp-drafts) - [Settings](https://knowledge.compliancygroup.com/home/the-guard-support#settings) [![compliancy-group-logo-white](https://knowledge.compliancygroup.com/hs-fs/hubfs/compliancy-group-logo-white.png?width=200&height=37&name=compliancy-group-logo-white.png "compliancy-group-logo-white")](http://compliancy-group.com) Contact Us - [support@compliancygroup.com](mailto:support@compliancygroup.com) Copyright © 2026, Compliancy Group LLC Cookie Settings