HIPAA Insider

Hosted by HIPAA Insider

TechnologyInterviews guests

Website RSS feed

Episodes

115

Latest episode

May 2026

Language

About the show

Join us for informative and entertaining discussions about how to make your business or practice more secure with HIPAA compliance. We'll cover topics like healthcare IT, HIPAA cloud hosting, telemedicine and healthcare applications, cybersecurity risk, PHI. WordPress etc., Sponsored by HIPAA Vault: https://www.hipaavault.com/

Listen to episodes

60 recent

August 19, 2026Episode 1188 min

HIPAA Rule Delayed – What Now for Your Practice?

The HIPAA Security Rule overhaul has been delayed. So what should healthcare organizations do now? In this episode of the HIPAA Insider Show , Adam Z. and HIPAA Vault CEO Gil Vidals unpack the latest developments surrounding the proposed HIPAA Security Rule update and what the longer regulatory timeline means for healthcare providers, covered entities, and business associates. While the anticipated cybersecurity overhaul has been pushed back, that doesn't mean organizations should put security improvements on hold. The current HIPAA Security Rule remains enforceable, cyber threats continue to evolve, and the additional time creates an opportunity to prepare without a last-minute compliance scramble. In this episode, we discuss: Why a regulatory delay doesn't mean cybersecurity can wait The importance of multi-factor authentication (MFA) Why encryption should remain a priority Vulnerability scanning and penetration testing The challenges facing smaller and rural healthcare providers How organizations can identify security and compliance gaps now How to turn the extended timeline into a strategic advantage The takeaway: The rule may be delayed, but cyber threats aren't. Use the extra runway to strengthen your security posture, address vulnerabilities, and prepare your organization for whatever comes next. Learn more about HIPAA Vault Interested in becoming a guest on the HIPAA Insider Show?

May 20, 2026Episode 11513 min

HIPAA Rules Just Changed: Security Is No Longer Optional

The 2026 HIPAA Rule Updates: From “Addressable” to Required HIPAA compliance is entering a new phase—and “optional” security measures are quickly disappearing. In this episode of the HIPAA Insider Show , Adam Z. and cloud security expert Gil Vidals break down the major HIPAA Security Rule updates shaping healthcare compliance in 2026. As regulators push key safeguards from “addressable” to REQUIRED , healthcare organizations of all sizes must rethink how they approach security, infrastructure, and risk management. We discuss: What HIPAA changes are already active Which requirements are still pending New mandatory encryption expectations The proposed 12-month penetration testing requirements Why MFA and stronger safeguards are becoming essential How smaller healthcare organizations can stay compliant without enterprise-level budgets This episode provides a practical look at how providers, MSPs, and health-tech teams can prepare for the next era of healthcare cybersecurity and compliance. Learn more about HIPAA Vault: https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show: https://www.hipaavault.com/podcast-guest/

May 6, 2026Episode 1147 min

When Trust Is the Vulnerability: The UK Biobank Data Scandal

In this episode of the HIPAA Insider Show , Adam Z. breaks down the alarming UK Biobank scandal involving reports of 500,000 health records listed for sale on Alibaba and what it reveals about the future of healthcare security. We discuss: How “authorized” users became the vulnerability Why “de-identified” data may not truly be anonymous The growing risks of healthcare data sharing Insider threats and failures in data governance What U.S. healthcare organizations can learn from this case Practical mitigation strategies to reduce HIPAA risk As healthcare organizations continue expanding AI, analytics, and third-party integrations, insider threats are becoming one of the most important cybersecurity challenges to address. If you work in healthcare IT, compliance, cybersecurity, or digital health, this episode provides critical insights into protecting patient trust and securing sensitive data. Learn more about HIPAA Vault: https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show: https://www.hipaavault.com/podcast-guest/

April 29, 2026Episode 11311 min

AI Coding Trap: Hidden HIPAA Costs

Building a healthcare app with AI has never been easier—but it may be setting you up for costly problems down the road. In this episode of the HIPAA Insider Show , we dive into the risks of “vibe coding” using platforms like Bubble, Glide, and Base44, and how these tools can lock you into “walled garden” environments that limit scalability, security, and compliance. We break down: What the AI coding trap really is How “walled garden” platforms create hidden technical debt Why many apps hit a HIPAA compliance wall before launch The importance of code portability for long-term success What it means to be VPC-ready How to avoid expensive rebuilds before handling patient data If you're a founder, developer, or healthcare operator building with AI tools, this episode provides a practical roadmap to avoid hidden costs and stay compliant from day one . Learn more about HIPAA Vault: https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show: https://www.hipaavault.com/podcast-guest/

April 22, 2026Episode 1128 min

The 2026 Compliance Overhaul: Audit-Proofing Your AI and Infrastructure

HIPAA compliance is entering a new era—and 2026 will mark a major turning point. In this episode of the HIPAA Insider Show , Adam Z. and HIPAA Vault CEO Gil Vidals break down the upcoming modernization of the HIPAA Security Rule and the growing wave of AI disclosure regulations impacting healthcare organizations. As key safeguards shift from “addressable” to required , and states introduce stricter rules around AI transparency, providers, IT teams, and health-tech companies must rethink how they approach compliance. We cover: What the 2026 HIPAA updates mean in practice The shift from recommended to mandatory security controls Why multi-factor authentication (MFA) is no longer optional “Break Glass” protocols for AI systems and emergency access New expectations around AI transparency and accountability How to prepare for audits without enterprise-level budgets If you're handling patient data or deploying AI in healthcare, this episode provides a clear, practical roadmap to stay compliant and reduce risk in the evolving regulatory landscape. Download the HIPAA Compliance Checklist: https://www.hipaavault.com/are-you-hipaa-compliant/ Learn more about HIPAA Vault: https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show: https://www.hipaavault.com/podcast-guest/

April 15, 2026Episode 11115 min

HIPAA Basics for 2026 Secure Your Practice

HIPAA compliance doesn’t have to be complex—or expensive. In this episode of the HIPAA Insider Show , Adam Z. and HIPAA Vault CEO Gil Vidals go back to fundamentals, breaking down the essential tools healthcare practitioners need in 2026 to stay secure and compliant without overspending. Whether you're a solo provider, private practice, or growing clinic, this episode provides a practical roadmap to modernize your operations safely. We cover: The core tools every practice needs for HIPAA compliance Securing email and document collaboration with platforms like Google Workspace Protecting your website with HIPAA-compliant hosting When to implement advanced solutions like patient intake forms Using HIPAA SFTP for secure, large data transfers If you’re looking to simplify compliance while leveraging modern technology, this episode shows how to build a secure, cost-effective foundation for your practice. Learn more about HIPAA Vault: https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show: https://www.hipaavault.com/podcast-guest/

April 3, 202617 min

Launching Your Vibe-Coded App: The HIPAA Vault Framework

You’ve built your healthcare app with AI. The MVP works. The “vibe” is right. But now comes the critical step: making it secure and HIPAA-compliant for real patient data. In this episode of the HIPAA Insider Show , Adam Z. and HIPAA Vault CEO Gil Vidals move beyond theory and into execution—breaking down the exact framework used to transform AI-built applications into production-ready, compliant systems. After exploring data strategy, synthetic data, and security gaps in previous episodes, this conversation focuses on what founders actually need to do next. We cover: How to migrate AI-built apps into secure, compliant environments Identifying and fixing hidden security vulnerabilities Validating infrastructure for HIPAA requirements Preparing applications to safely handle Protected Health Information (PHI) Launching without building a full DevOps or security team If you’ve built an app using tools like Replit, Cursor, or v0, this episode provides a practical roadmap to go from prototype to secure production . 🔐 Learn more about HIPAA Vault: https://www.hipaavault.com/ 🎙 Become a guest on the HIPAA Insider Show: https://www.hipaavault.com/podcast-guest/

March 27, 2026Episode 10927 min

Securing the Next Generation of AI-Built Healthcare Apps

AI is accelerating how healthcare applications are built—but it’s also exposing a growing gap between innovation and security. In this episode of the HIPAA Insider Show , Adam Z. sits down with Mike Armistead , CEO of Pulse Security AI and a serial tech entrepreneur with over 30 years of experience, to explore how AI-assisted coding is reshaping healthcare development—and what it means for security and compliance. We discuss: How AI-assisted coding is changing the way healthcare apps are built The emerging “security value gap” between tools and real business risk Why traditional security approaches are falling short What a true system of record for security leaders looks like Key trends founders and IT professionals need to watch If you're building or managing healthcare technology, this episode highlights how to balance speed, innovation, and security in an AI-driven landscape. Learn more about Pulse Security AI: https://pulsesecurity.ai/ Security Impact Circle: https://www.securityimpactcircle.org/ Learn more about HIPAA Vault: https://www.hipaavault.com/?utm_source=spotify&utm_medium=podcast&utm_campaign=mike_armistead

March 20, 2026Episode 10827 min

Beyond the BAA: Using Privacy-Preserving Tech to Win at AI

In healthcare, signing a Business Associate Agreement (BAA) is only the beginning. To safely deploy AI, organizations must go beyond paperwork and implement privacy-preserving technologies (PETs) that protect patient data at the architectural level. In this episode of the HIPAA Insider Show , Adam Z. is joined by Timothy Nobles to explore how healthcare leaders can innovate with AI while maintaining trust, security, and compliance. We cover: Why BAAs alone are not enough for modern healthcare AI How synthetic data enables safe development and testing The role of differential privacy in protecting sensitive information Practical ways to build privacy guardrails into AI systems How clinics, MSPs, and health-tech teams can innovate without exposing PHI If you're working with AI in healthcare, this episode provides a roadmap for moving from checkbox compliance to real data protection . Learn more about Integral: https://www.useintegral.com/ Connect with Timothy Nobles: https://www.linkedin.com/in/timothynobles Learn more about HIPAA Vault: https://www.hipaavault.com/?utm_source=spotify&utm_medium=podcast&utm_campaign=timothy_nobles Become a podcast guest: https://www.hipaavault.com/podcast-guest/?utm_source=spotify&utm_medium=podcast&utm_campaign=timothy_nobles

March 13, 2026Episode 10711 min

Built Your AI Health App? Now Make It HIPAA Compliant

AI coding tools are enabling a new wave of healthcare innovators. Doctors, clinicians, and founders are now “vibe coding” applications using tools like Replit, Cursor, and v0—rapidly building MVPs with the help of large language models. But what happens when those apps start handling real patient data ? In this episode of the HIPAA Insider Show , host Adam Z. and HIPAA Vault CEO Gil Vidals explore how healthcare innovators can safely move from an AI development sandbox to a secure, HIPAA-compliant production environment . They discuss: • The rise of “vibe coding” in healthcare startups • The risks of handling PHI in AI-generated applications • The Safe Landing Zone strategy for compliant deployment • Using “Magic Prompts” to document AI-generated tech stacks • Why serverless architecture can help meet enterprise security standards while keeping infrastructure costs low • How founders can launch secure healthcare apps without building a full DevOps team If you’ve built an AI-powered healthcare MVP and are ready to scale responsibly, this episode provides a practical roadmap for bridging the gap between rapid innovation and HIPAA compliance . Learn more about HIPAA Vault: https://www.hipaavault.com/?utm_source=spotify&utm_medium=podcast&utm_campaign=vibe_coding Become a guest on the HIPAA Insider Show: https://www.hipaavault.com/podcast-guest/?utm_source=spotify&utm_medium=podcast&utm_campaign=vibe_coding