Search
magnifying-glass
The Encrypted Chart
Log in
Subscribe
Home
Archive
The Encrypted Chart

HIPAA Compliance

Intake Forms and Consent

+2

Your Privacy Notice May Describe a Rule That No Longer Exists

Aug 11, 2026

•

4 min read

Your Privacy Notice May Describe a Rule That No Longer Exists

A federal rule was struck down, New York got stricter, and nothing on your forms said a word. Introducing Compliance Watch.

Brad Lieberman
Brad Lieberman

Practice Security

+2

The Annual HIPAA Risk Assessment: Why It Exists and Why One Click in Illinois Just Made It Urgent

Aug 8, 2026

•

4 min read

The Annual HIPAA Risk Assessment: Why It Exists and Why One Click in Illinois Just Made It Urgent

Fourteen investigations, one missing document, and the quietest four weeks of your working year.

Brad Lieberman
Brad Lieberman

Practice Security

+1

I Bolted a Hard Drive to a Desk That Moves Up and Down

Aug 4, 2026

•

7 min read

I Bolted a Hard Drive to a Desk That Moves Up and Down

A moving day, a screwdriver, and the part of HIPAA nobody writes about

Brad Lieberman
Brad Lieberman

HIPAA Compliance

+1

Two Breaches, One Question: When Does Your Clock Start?

Jun 20, 2026

•

4 min read

Two Breaches, One Question: When Does Your Clock Start?

Two breaches hit the news this week, but the part that matters for your practice is not the headline. It is one question hiding in the HIPAA notification rule: when does your sixty-day clock actually start.

Brad Lieberman
Brad Lieberman

Practice Security

+2

The Email Habits That Just Cost a Mental Health Practice $900,000

Jun 13, 2026

•

5 min read

The Email Habits That Just Cost a Mental Health Practice $900,000

A Massachusetts behavioral health center settled a class action this week for $900,000 over a breach that started with one phished email account. A national legal alert published two days ago explains how a routine group email becomes a reportable HIPAA event. Both stories point at the same form most solo therapy practices don't have.

Brad Lieberman
Brad Lieberman

HIPAA Compliance

+1

$900,000 for the 72 Hours You Didn't Plan For

May 30, 2026

•

6 min read

$900,000 for the 72 Hours You Didn't Plan For

A Small OB/GYN practice just paid $900,000 to settle a class action over a four-day breach in 2022. The breach itself wasn't extraordinary — what made it expensive was what happened next. Here's the operational document most independent practices don't have, and why it's the difference between $0 and seven figures.

Brad Lieberman
Brad Lieberman

HIPAA Compliance

+1

California Just Reached Into Your Out-of-State Practice.

May 26, 2026

•

4 min read

California Just Reached Into Your Out-of-State Practice.

A California Supreme Court ruling last week makes it easier to sue any practice that holds a California resident's medical records — including the records of patients who moved there years ago and you haven't seen since.

Brad Lieberman
Brad Lieberman

Intake Forms and Consent

+1

Your Forms Predate the 42 CFR Part 2 Update. So Did Mine.

May 23, 2026

•

6 min read

Your Forms Predate the 42 CFR Part 2 Update. So Did Mine.

This weekend I sat down to audit my own NPP and intake consent against the 42 CFR Part 2 Final Rule. I found gaps. Here's what I found, how I'm fixing them by Tuesday morning, and the same audit you can run on yours.

Brad Lieberman
Brad Lieberman

HIPAA Compliance

+1

$245,000 for the Form You Don't Have

May 19, 2026

•

4 min read

$245,000 for the Form You Don't Have

OCR fined five practices a combined $1.41 million in the past two weeks. The common thread wasn't sophisticated hacking. It was a missing annual document. Here's why solo and small-group practices should be reading their own compliance paperwork this week.

Brad Lieberman
Brad Lieberman

Vendor and BAA Risk

+2

When Your Billing Service Gets Hacked: A $225K Federal Wake-Up Call

May 9, 2026

•

7 min read

When Your Billing Service Gets Hacked: A $225K Federal Wake-Up Call

If your billing service got hacked tomorrow, what does the contract you signed with them actually say? Last month the federal government fined a vendor in that exact pattern $225,000. Here's what to read this week — before it's your patients calling.

Brad Lieberman
Brad Lieberman

The Encrypted Chart

Join the list to receive our newest posts straight to your inbox.

The Encrypted Chart

Home

Subscribe

Archive

Login

Reset Password

Update Password

Profile

Search

© 2026 The Encrypted Chart · The Encrypted Chart is published by Lieberman Consulting, LLC, a consulting firm — not a law firm. Content is educational, not legal advice..
beehiivPowered by beehiiv