HIPAA Privacy Rule update 2026: Proposed changes explained

Learn what the proposed 2026 HIPAA Privacy Rule changes could mean for NPPs, care coordination, records access, and your practice.

Using Gmail in your therapy practice? See how Gmail and Hushmail compare for PHI, HIPAA compliance, cost, and everyday email.

Learn when therapists should use secure email or secure forms to protect PHI, support HIPAA compliance, and keep client communication running smoothly.

Do you need to pay for HIPAA-compliant email? Learn what HIPAA requires, why encryption alone isn’t enough, and when a paid service makes sense.

Learn how to spot PHI in client emails, when regular email is fine, and when secure messaging can help support HIPAA compliance.

Can you email a referral under HIPAA? Learn when you can share PHI with other healthcare providers and what safeguards you need to send it securely.

Is Squarespace HIPAA-compliant? Learn why your website's contact form matters, and how to let prospective clients reach out securely without rebuilding your website.

Discover the truth behind five common HIPAA myths, from email compliance to PHI and enforcement, with practical guidance for small practices.

Learn whether insurance information counts as PHI under HIPAA, when clients should update coverage details, and how secure forms can simplify insurance collection for therapy practices.

Learn when HIPAA applies to prospective client emails, why the first contact may already involve PHI, and how to handle inquiries securely without adding complexity.

Learn how therapists can use AI tools safely and ethically while staying HIPAA-compliant. Tips for risk analysis, safeguards, and informed consent to protect client privacy.

PHI isn’t just clinical notes. Learn how small healthcare practices can identify and protect PHI in everyday communication.

Generic HIPAA and consent forms may leave out required state disclosures, telehealth rules, and ethics standards. Here’s how to fix yours.

Confused about Notice of Privacy Practices (NPPs) for your small practice? Our guide breaks it down and shows you how to get it right.

Email can be protected while it’s being sent. But what happens after delivery? Learn what therapists should consider about HIPAA risk.

What therapists call a HIPAA waiver isn't a true waiver. Learn what client requests for non-secure communication actually do and what HIPAA still requires.

A straightforward six-step HIPAA checklist to help you tighten security and reduce risk. It walks through several safeguards highlighted in proposed HIPAA Security Rule updates, such as risk assessments, two-step verification, and encryption, as well as other core HIPAA responsibilities for small practices.

The HHS is placing renewed emphasis on three familiar safeguards in the HIPAA Security Rule: multi-factor authentication, risk analysis, and encryption. Understanding what's happening in each area can help you make small, practical adjustments that support client privacy and boost your practice's security.