Stateless Data Processing Approaches in HIPAA-Compliant AI Platforms
Stateless processing limits PHI exposure by design rather than relying on vendor contracts alone.
Deshawn Okafor
Section
HIPAA & Security
8 stories in HIPAA & Security.
HIPAA Breach Notification Rules for Medical Office Administrators
Discover when to notify affected patients and regulators after a HIPAA breach.
Carlos Ibarra-Mendez
Evaluating AI Tool Security Policies Before Signing Healthcare Contracts
Carlos Ibarra-Mendez
Risk Analysis Requirements Under HIPAA Security Rule for Small Practices
Small practices face the same risk analysis mandate as large health systems, with no exemptions.
Miriam Tse-Holloway
Minimum Necessary Standard Applied to AI Agent Data Access
Most AI agents access far more patient data than their specific tasks require.
Renata Szymborska
Staff HIPAA Training Obligations When Introducing AI Tools
Deploying AI in medical practice triggers existing HIPAA training obligations staff may not know.
Miriam Tse-Holloway
HIPAA Business Associate Agreement Requirements for AI Vendors
AI tools require a BAA based on how they handle patient data, not their marketing claims.
Miriam Tse-Holloway
SOC 2 Type II vs HIPAA Certification for Healthcare AI Tools
These certifications answer different questions and leave different gaps in healthcare AI.
Miriam Tse-Holloway