Medcurity Logo
Login

The BAA Inventory Checklist: Account for Every Business Associate Agreement

HIPAA compliance for multi-location hospitals and hospital networks — Medcurity platform.

The BAA Inventory Checklist: Account for Every Business Associate Agreement Most HIPAA enforcement actions involving business associates come down to one document that was never signed. A BAA inventory — a living list of every vendor relationship that touches protected health information, matched to an executed agreement — is the fastest way to find the […]

HIPAA Security Rule 2026: What to Expect When OCR Finalizes

HIPAA compliance for multi-location hospitals and hospital networks — Medcurity platform.

HIPAA Security Rule 2026: What to Expect When OCR Finalizes Updated June 2026 — status: proposed rule, not yet final. As of June 2026, the 2026 HIPAA Security Rule update remains a proposed rule, not final law. The HHS Office for Civil Rights published its Notice of Proposed Rulemaking on January 6, 2025, and is […]

HIPAA Workforce Training Requirements (2026): Who, How Often, and What to Cover

HIPAA compliance for multi-location hospitals and hospital networks — Medcurity platform.

HIPAA workforce training is the foundation of every covered entity’s and business associate’s compliance program — and one of the most commonly cited deficiencies in OCR enforcement actions. Yet the training requirement is broader than most providers think: HIPAA defines “workforce” to include not just employees but also volunteers, trainees, unpaid interns, temporary staff, and […]