Issue #6: Health Privacy Changed in 2026 — What Providers Need to Know About Part 2
Health privacy requirements changed in 2026 for organizations handling substance use disorder records subject to 42 CFR Part 2. This Compliance Brief explains what healthcare providers should understand about the changes, how Part 2 relates to HIPAA, and practical areas to review within their privacy and compliance programs.
Issue #5: Downtime Preparedness Is a HIPAA Readiness Issue
Many healthcare organizations focus on preventing incidents but devote less attention to how operations continue when systems become unavailable. Whether caused by ransomware, EHR outages, internet disruptions, or vendor failures, downtime events can quickly affect scheduling, documentation, communications, and patient care workflows. This issue explores four operational risks that clinics should evaluate to strengthen continuity, reduce compliance exposure, and improve organizational resilience.
Issue #4: Patient Access Failures Remain a Real HIPAA Enforcement Risk
Patient access failures remain a real HIPAA risk when records requests are delayed, inconsistently handled, or poorly tracked. This issue explains where right-of-access workflows commonly break down and what clinics should review now.