⚠️ January 2025 HIPAA Security Rule Updates Now in Effect — New MFA, encryption, and notification requirements.

Frequently Asked Questions

Get answers to common questions about HIPAA compliance, requirements, and best practices.

HIPAA Basics

Privacy Rule

Security Rule

Business Associates

Breach Notification

Penalties & Enforcement

Related Resources

Assessment Tool Questions

Common questions about using our free HIPAA self-assessment tool

Learn more

HIPAA Ready Pro Service

Questions about our professional compliance services and support

Learn more

HIPAA Glossary

Definitions of key HIPAA terms and acronyms

Learn more

Still Have Questions?

Take our free self-assessment or schedule a consultation with our compliance experts.

Frequently Asked Questions

HIPAA Basics

What is HIPAA?

Who must comply with HIPAA?

What is Protected Health Information (PHI)?

Is there an official HIPAA certification?

Do small practices need to comply with HIPAA?

Privacy Rule

What is the difference between the Privacy Rule and Security Rule?

What rights do patients have under HIPAA?

Can I share PHI without patient authorization?

What is a Notice of Privacy Practices?

Security Rule

What are the three types of HIPAA safeguards?

Is encryption required under HIPAA?

What is the difference between required and addressable specifications?

Do I need to conduct a risk analysis?

Business Associates

What is a Business Associate Agreement (BAA)?

Who qualifies as a Business Associate?

Can a business associate have its own business associates?

What happens if a business associate violates HIPAA?

Breach Notification

What constitutes a HIPAA breach?

What are breach notification requirements?

Does encryption eliminate breach notification requirements?

How long do I have to report a breach?

Penalties & Enforcement

What are the penalties for HIPAA violations?

Who enforces HIPAA?

What are the most common HIPAA violations?

How long must HIPAA records be retained?

Related Resources

Assessment Tool Questions

HIPAA Ready Pro Service

HIPAA Glossary

Still Have Questions?