Help Me With HIPAA

Hosted by Donna Grindle and David Sims

BusinessExplicit

Website RSS feed

Episodes

592

Latest episode

Aug 2026

Language

About the show

In today's environment of data breaches, identity theft, fraud, and increasing connectivity, HIPAA Privacy and Security rules are a responsibility to your patients and your clients. HIPAA isn't about compliance, it's about patient care.

Listen to episodes

60 recent

August 28, 2026Episode 57554 min

Spend Smarter Before the Breach - Ep 575

There are two times to spend money on cybersecurity: before something goes wrong, when you still have choices, and after something goes wrong, when your choices have packed a bag and left town. With the average U.S. data breach now costing $11.5 million, the question isn't whether security costs money. It's whether you're spending that money on the things most likely to keep a bad day from becoming a very long, very expensive year. The latest breach-cost research offers some surprisingly practical clues, including faster detection, smarter access controls, employee training, encryption, simpler systems, qualified security help, and properly managed AI. And there's an important catch: outsourcing the work doesn't outsource the accountability. This episode digs into how to spend smarter while you still have the luxury of deciding where the money goes. More info at HelpMeWithHIPAA.com/575

August 21, 2026Episode 57442 min

Connecting the Dots - What the Ransomware Headlines Are Missing - Ep 574

Ransomware used to sound like a fairly straightforward nightmare: attackers get in, encrypt your files, demand money, and ruin everyone's week. Unfortunately, the business model has gotten an upgrade. Today's ransomware groups are stealing massive amounts of data, recruiting affiliates with surprisingly competitive revenue splits, disabling security tools, contacting patients directly, and even hijacking social media accounts to turn up the pressure. Meanwhile, regulators are asking harder questions about risk analysis and looking further into the past for answers. Connect those dots, and the picture gets uncomfortable fast. This episode explores what recent ransomware headlines are really telling healthcare organizations, including the small ones still hoping they're too tiny to attract attention. Spoiler alert: the bad guys appear to have misplaced their minimum-size requirement. More info at HelpMeWithHIPAA.com/574

August 14, 2026Episode 57354 min

Threats Are Evolving - Are You? - Ep 573

Cybersecurity has always been a moving target, but lately the target seems to have strapped on roller skates, grabbed an AI assistant, and headed straight for the nearest hotel Wi-Fi. Vulnerabilities are being patched at record rates, attackers are finding clever new ways to steal credentials, and AI agents can now take action with surprisingly little supervision. In this episode, we look at what happens when threats evolve faster than the plans designed to handle them, and why having security tools isn't the same as knowing they're actually protecting you. The real question isn't whether technology will keep changing. It's whether your security practices can keep up. More info at HelpMeWithHIPAA.com/573

August 7, 2026Episode 57245 min

Operation Vital Signs Got Real - Ep 572

Most organizations have an incident response plan, but how well would it hold up if your normal communication channels suddenly couldn't be trusted? In this episode, we dive into a nationwide healthcare cybersecurity exercise that challenged participants to think beyond compliance and technical defenses, exposing just how critical preparation, collaboration, and secure communication become during a large-scale cyber crisis. Along the way, a surprising real-world AI development reminds us that tomorrow's threats may arrive sooner than anyone expects. More info at HelpMeWithHIPAA.com/572

July 31, 2026Episode 57134 min

HIPAA Privacy Changes Soon. Maybe. - Ep 571

Regulations may move at the speed of a sleepy turtle, but patient expectations certainly don't. As healthcare organizations wait to see what the final HIPAA Privacy Rule will include, there is a surprising amount of work that can, and should, already be underway. This episode explores the practical steps you can take now, the common misconceptions that continue to create confusion, and why preparing early is far less painful than trying to outrun an approaching compliance deadline. If you start getting your ducks in a row today, it just might save you from chasing them all over the parking lot tomorrow. More info at HelpMeWithHIPAA.com/571

July 24, 2026Episode 57047 min

Measuring Financial Impacts - Ep 570

Cyberattacks are expensive—but just how expensive? This episode dives into a brand-new study that finally puts real numbers behind the financial impact of data breaches, using thousands of cyber insurance claims instead of scary headlines and wild guesses. From ransomware and business interruption to cyber insurance surprises, you'll discover why the biggest cost isn't always what you think. If you've ever wondered whether your organization is truly prepared for a breach—or just hoping insurance will magically save the day—this conversation is packed with practical insights, a few laughs, and plenty of reasons to take another look at your risk management strategy. More info at HelpMeWithHIPAA.com/570

July 17, 2026Episode 56941 min

Where Is the Cybersecurity Poverty Line - Ep 569

Think cybersecurity is all about how much money you throw at the problem? Think again. In this episode, we unpack the idea of the "cybersecurity poverty line" and why being under-protected isn't always about having an empty wallet. From outdated technology to missing expertise and leadership roadblocks, you'll discover why even organizations with healthy budgets can still leave the front door wide open to cybercriminals. If you've ever wondered whether your biggest security challenge is really your budget, or something else entirely, this conversation is for you. More info at HelpMeWithHIPAA.com/569

July 10, 2026Episode 56848 min

5 Costly Cybersecurity Assumptions - Ep 568

If you've ever caught yourself saying, "We're too small to be hacked," or "That's why we have cyber insurance," you might want to keep reading. This episode shines a spotlight on five cybersecurity assumptions that seem perfectly reasonable – right up until they cost you time, money, or your sanity. From misplaced confidence in vendors to the myth that restoring your systems means the crisis is over, this conversation serves up practical reality checks with just enough humor to make the hard truths a little easier to swallow. More info at HelpMeWithHIPAA.com/568

July 3, 2026Episode 56738 min

Lava Lamps, Gag Gifts, and HIPAA - Ep 567

What do lava lamps, whoopee cushions, and HIPAA have in common? More than you'd think! This week, a familiar mall retailer famous for gag gifts and lava lamps finds itself at the center of an OCR enforcement action that highlights a common misconception about employer-sponsored health plans. Along the way, you'll learn why "we've never had a problem before" isn't a cybersecurity strategy, how self-funded health plans fit into HIPAA, and why ignoring compliance can quickly become a very expensive joke. More info at HelpMeWithHIPAA.com/567

June 26, 2026Episode 56656 min

Use Your Free OCR Consulting - Ep 566

Ever wish you could get expert HIPAA advice straight from the source – without the invoice? This episode digs into a little-known offering: the "free consulting" that the Office for Civil Rights (OCR) actually gives out, if you know where to look. We break down the seven biggest lessons buried in official OCR videos and settlement guidance, covering everything from keeping tabs on your inventory (yes, all your data – even the digital version of an old truck growing weeds) to why risk management means more than doing paperwork once a year. If you're in healthcare and want practical tips to avoid trouble before it makes the headlines, this episode's for you. More info at HelpMeWithHIPAA.com/566