HIPAA Insider

Hosted by HIPAA Insider

TechnologyInterviews guests

Website RSS feed

Episodes

120

Latest episode

Oct 2026

Language

About the show

Join us for informative and entertaining discussions about how to make your business or practice more secure with HIPAA compliance. We'll cover topics like healthcare IT, HIPAA cloud hosting, telemedicine and healthcare applications, cybersecurity risk, PHI. WordPress etc., Sponsored by HIPAA Vault: https://www.hipaavault.com/

Listen to episodes

60 recent

October 14, 2026Episode 1224 min

BastionGPT Review: Is This Healthcare AI Really Secure?

Can healthcare-focused AI platforms deliver the security and privacy controls organizations need to protect sensitive patient information? In this episode of the HIPAA Insider Show , Adam puts BastionGPT to the test, exploring its features and security configuration during a Pro Plus trial. But while setting up the platform, he encounters an unexpected challenge: a security setting he can't seem to find. In this episode, we discuss: Adam's experience testing BastionGPT Pro Plus The importance of access controls in healthcare AI Security configuration and administrative visibility Patient data privacy and HIPAA considerations What organizations should evaluate before adopting AI tools A healthcare-focused AI platform isn't automatically the right fit for every organization's security and compliance needs. Understanding its controls is essential before introducing Protected Health Information (PHI). Listen now to discover what Adam found and why security settings matter when evaluating AI for healthcare. Learn More About HIPAA Vault Become A Podcast Guest

September 30, 202616 min

Ship It Safely: HIPAA Cloud Security for Your AI Health App

You built your healthcare app. You moved it out of the AI sandbox. Now it’s time to ship it safely. This week on the HIPAA Insider Show , we conclude our three-part Vibe Coding series with the final phase: preparing your AI-built healthcare application for production. Moving fast with AI can dramatically shorten the development cycle, but once real users and Protected Health Information (PHI) enter the picture, your cloud infrastructure and security architecture matter. In this episode, we explore a layered approach to cloud security, including: Least privilege and controlling access Web Application Firewalls (WAFs) for public-facing applications Secure cloud storage and controlled file access Proper secrets management for API keys and credentials Keeping backend services and databases private Encryption at rest and in transit Preparing for security questionnaires and customer audits Why investing in security upfront can help reduce the potentially devastating cost of a data breach The takeaway? Production-ready means more than working code. AI can help you build faster, but it doesn’t eliminate the need for secure infrastructure, proper access controls, encryption, and ongoing security practices. Build it. Migrate it. Secure it. Ship it safely. Learn more about HIPAA Vault Interested in becoming a guest on the HIPAA Insider Show?

September 23, 2026Episode 12012 min

From AI Sandbox to HIPAA-Compliant Cloud: The Vibe Coding Escape Route

You built your healthcare app with AI. The prototype works. Now how do you get it out of the sandbox and into a secure environment? This week on the HIPAA Insider Show , we continue our Vibe Coding series with Phase 2: From Sandbox to Secure Cloud . AI development tools can help healthcare founders and developers move from an idea to a working application incredibly fast. But before that application starts handling real Protected Health Information (PHI) , there’s another critical step: taking control of the code, credentials, infrastructure, and production environment. In this episode, we break down the AI escape route , including: How to extract your raw codebase from the original development environment Why moving your code into a repository you control matters How to identify and remove hardcoded API keys, credentials, and secrets Why AI-generated code should be reviewed before production Moving from a multi-tenant sandbox into a HIPAA-compliant Virtual Private Cloud (VPC) Preparing your infrastructure before introducing real PHI What healthcare developers should consider when moving from prototype to production The takeaway? Prototype-ready ≠ production-ready. AI can dramatically accelerate development, but healthcare teams still need visibility and control over what was built, where it runs, which services it communicates with, and how sensitive healthcare data will be protected. Build fast. Take control of your code. Secure the environment before introducing PHI. If you're a digital health founder, developer, CTO, healthcare IT professional, or compliance leader building with AI, this episode is for you. Learn more about HIPAA Vault Interested in becoming a guest on the HIPAA Insider Show?

September 9, 2026Episode 12013 min

The AI Sandbox Trap: Is Your Vibe-Coded Health App Breaking HIPAA?

Is your vibe-coded healthcare app actually ready to handle PHI? This week on the HIPAA Insider Show , we dive into the “AI Sandbox Trap” —a growing challenge for digital health founders and developers using AI-powered tools to build healthcare applications faster than ever. Vibe coding can take an idea from concept to working prototype incredibly quickly. But a functioning app isn't automatically a HIPAA-compliant app . In this episode, we explore what can happen when AI-generated healthcare applications move from experimentation into production, including: Where default configurations can expose Protected Health Information (PHI) The hidden compliance risks of AI-generated code and workflows Walled-garden platforms vs. portable development environments Why Business Associate Agreements (BAAs) matter when vendors handle PHI How third-party integrations can introduce unexpected data flows What founders and developers should evaluate before using real patient data How to think about moving an AI-built prototype into a secure production environment We also discuss tools and development approaches such as Bubble and Cursor , and why understanding where your code, infrastructure, and patient data live becomes critical when building for healthcare. The takeaway: Working code ≠ HIPAA-compliant code. If you're a digital health founder, developer, CTO, healthcare IT professional, or compliance leader experimenting with AI development and vibe coding, this episode is for you. Learn more about HIPAA Vault Interested in joining the HIPAA Insider Show as a guest?

August 19, 2026Episode 1188 min

HIPAA Rule Delayed – What Now for Your Practice?

The HIPAA Security Rule overhaul has been delayed. So what should healthcare organizations do now? In this episode of the HIPAA Insider Show , Adam Z. and HIPAA Vault CEO Gil Vidals unpack the latest developments surrounding the proposed HIPAA Security Rule update and what the longer regulatory timeline means for healthcare providers, covered entities, and business associates. While the anticipated cybersecurity overhaul has been pushed back, that doesn't mean organizations should put security improvements on hold. The current HIPAA Security Rule remains enforceable, cyber threats continue to evolve, and the additional time creates an opportunity to prepare without a last-minute compliance scramble. In this episode, we discuss: Why a regulatory delay doesn't mean cybersecurity can wait The importance of multi-factor authentication (MFA) Why encryption should remain a priority Vulnerability scanning and penetration testing The challenges facing smaller and rural healthcare providers How organizations can identify security and compliance gaps now How to turn the extended timeline into a strategic advantage The takeaway: The rule may be delayed, but cyber threats aren't. Use the extra runway to strengthen your security posture, address vulnerabilities, and prepare your organization for whatever comes next. Learn more about HIPAA Vault Interested in becoming a guest on the HIPAA Insider Show?

May 20, 2026Episode 11513 min

HIPAA Rules Just Changed: Security Is No Longer Optional

The 2026 HIPAA Rule Updates: From “Addressable” to Required HIPAA compliance is entering a new phase—and “optional” security measures are quickly disappearing. In this episode of the HIPAA Insider Show , Adam Z. and cloud security expert Gil Vidals break down the major HIPAA Security Rule updates shaping healthcare compliance in 2026. As regulators push key safeguards from “addressable” to REQUIRED , healthcare organizations of all sizes must rethink how they approach security, infrastructure, and risk management. We discuss: What HIPAA changes are already active Which requirements are still pending New mandatory encryption expectations The proposed 12-month penetration testing requirements Why MFA and stronger safeguards are becoming essential How smaller healthcare organizations can stay compliant without enterprise-level budgets This episode provides a practical look at how providers, MSPs, and health-tech teams can prepare for the next era of healthcare cybersecurity and compliance. Learn more about HIPAA Vault: https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show: https://www.hipaavault.com/podcast-guest/

May 6, 2026Episode 1147 min

When Trust Is the Vulnerability: The UK Biobank Data Scandal

In this episode of the HIPAA Insider Show , Adam Z. breaks down the alarming UK Biobank scandal involving reports of 500,000 health records listed for sale on Alibaba and what it reveals about the future of healthcare security. We discuss: How “authorized” users became the vulnerability Why “de-identified” data may not truly be anonymous The growing risks of healthcare data sharing Insider threats and failures in data governance What U.S. healthcare organizations can learn from this case Practical mitigation strategies to reduce HIPAA risk As healthcare organizations continue expanding AI, analytics, and third-party integrations, insider threats are becoming one of the most important cybersecurity challenges to address. If you work in healthcare IT, compliance, cybersecurity, or digital health, this episode provides critical insights into protecting patient trust and securing sensitive data. Learn more about HIPAA Vault: https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show: https://www.hipaavault.com/podcast-guest/

April 29, 2026Episode 11311 min

AI Coding Trap: Hidden HIPAA Costs

Building a healthcare app with AI has never been easier—but it may be setting you up for costly problems down the road. In this episode of the HIPAA Insider Show , we dive into the risks of “vibe coding” using platforms like Bubble, Glide, and Base44, and how these tools can lock you into “walled garden” environments that limit scalability, security, and compliance. We break down: What the AI coding trap really is How “walled garden” platforms create hidden technical debt Why many apps hit a HIPAA compliance wall before launch The importance of code portability for long-term success What it means to be VPC-ready How to avoid expensive rebuilds before handling patient data If you're a founder, developer, or healthcare operator building with AI tools, this episode provides a practical roadmap to avoid hidden costs and stay compliant from day one . Learn more about HIPAA Vault: https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show: https://www.hipaavault.com/podcast-guest/

April 22, 2026Episode 1128 min

The 2026 Compliance Overhaul: Audit-Proofing Your AI and Infrastructure

HIPAA compliance is entering a new era—and 2026 will mark a major turning point. In this episode of the HIPAA Insider Show , Adam Z. and HIPAA Vault CEO Gil Vidals break down the upcoming modernization of the HIPAA Security Rule and the growing wave of AI disclosure regulations impacting healthcare organizations. As key safeguards shift from “addressable” to required , and states introduce stricter rules around AI transparency, providers, IT teams, and health-tech companies must rethink how they approach compliance. We cover: What the 2026 HIPAA updates mean in practice The shift from recommended to mandatory security controls Why multi-factor authentication (MFA) is no longer optional “Break Glass” protocols for AI systems and emergency access New expectations around AI transparency and accountability How to prepare for audits without enterprise-level budgets If you're handling patient data or deploying AI in healthcare, this episode provides a clear, practical roadmap to stay compliant and reduce risk in the evolving regulatory landscape. Download the HIPAA Compliance Checklist: https://www.hipaavault.com/are-you-hipaa-compliant/ Learn more about HIPAA Vault: https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show: https://www.hipaavault.com/podcast-guest/

April 15, 2026Episode 11115 min

HIPAA Basics for 2026 Secure Your Practice

HIPAA compliance doesn’t have to be complex—or expensive. In this episode of the HIPAA Insider Show , Adam Z. and HIPAA Vault CEO Gil Vidals go back to fundamentals, breaking down the essential tools healthcare practitioners need in 2026 to stay secure and compliant without overspending. Whether you're a solo provider, private practice, or growing clinic, this episode provides a practical roadmap to modernize your operations safely. We cover: The core tools every practice needs for HIPAA compliance Securing email and document collaboration with platforms like Google Workspace Protecting your website with HIPAA-compliant hosting When to implement advanced solutions like patient intake forms Using HIPAA SFTP for secure, large data transfers If you’re looking to simplify compliance while leveraging modern technology, this episode shows how to build a secure, cost-effective foundation for your practice. Learn more about HIPAA Vault: https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show: https://www.hipaavault.com/podcast-guest/