The Healthcare Compliance Step-By-Step Podcast

OSHA 2026: Connecting SDS Requirements to SOPs and Daily Compliance highlights why Safety Data Sheets are more than a binder requirement and why healthcare organizations must connect chemical safety information to real workplace procedures, employee training, and daily compliance practices. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how SDS requirements support OSHA's Hazard Communication expectations and how healthcare organizations can use SDS records to identify chemical hazards, train employees, follow manufacturer instructions, store products properly, label containers, and respond to exposure or spills.Key Topics:Why Safety Data Sheets must be part of daily operations, not just stored in a binder.How SDS requirements connect to SOPs, training, labeling, storage, and exposure response.How to keep SDS records accessible and ensure staff know how to use them.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: June 30, 2026.

HIPAA 2026: Small Business Adjustments Healthcare Practices Need to Make Now highlights why small healthcare organizations should prepare for anticipated changes to the HIPAA Security Rule and stronger cybersecurity expectations. The session focuses on practical safeguards such as asset inventories, ePHI data mapping, multifactor authentication, encryption, vulnerability management, contingency planning, access control, and vendor oversight. In this session, Jose Delgado (Taino Consultants) sits down with Mr. Jose Carbia, owner and president of TeamLogic IT, to discuss what small healthcare businesses should be doing now for HIPAA 2026. The conversation translates technical and regulatory expectations into practical steps that owners, administrators, compliance officers, office managers, and healthcare leaders can understand and begin implementing. Key Topics:Why small healthcare organizations should begin preparing for HIPAA 2026 now.How expected HIPAA Security Rule updates may affect daily operations.Why asset inventories, ePHI data mapping, MFA, encryption, and access controls matter.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: June 23, 2026.

Microsoft’s 2026 Phishing Warning: Why Healthcare Organizations Remain a Prime Target highlights why healthcare continues to be one of the most targeted industries for cyberattacks and why phishing remains a major threat to patient data, systems, and organizational security. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss Microsoft's 2026 phishing warning, the campaign that reached more than 35,000 users across 13,000 organizations, and why healthcare organizations must stay alert to modern phishing tactics, credential theft, and token compromise.Key Topics:Why healthcare remains a prime target for phishing attacks.How modern phishing has evolved beyond simple fake emails.How adversary-in-the-middle attacks can bypass traditional multifactor authentication.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: June 16, 2026.

HIPAA or FERPA? Understanding Which Privacy Rule Applies highlights the important differences between two major privacy laws and why organizations must understand which rule applies before handling student, medical, counseling, athletic, or academic records. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how HIPAA and FERPA apply in different settings, where confusion often occurs, and why proper record handling is essential for healthcare organizations, schools, colleges, universities, and organizations that work at the intersection of healthcare and education.Key Topics:How HIPAA and FERPA differ and why the distinction matters.When HIPAA applies to medical and healthcare records.When FERPA applies to student education, academic, and certain student health records.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: June 9, 2026.

Compliance, Cybersecurity, AI, Medicare Scrutiny, and the Operational Pressures Facing Medical Practices in 2026 highlights the growing compliance, cybersecurity, AI, Medicare, documentation, training, and operational risks facing medical practices as healthcare organizations prepare for a more demanding regulatory environment. In this session, Dr. Jose Delgado, CEO of Taino Consultants and EPICompliance, discusses the current trends affecting medical practices in 2026, including increased cybersecurity expectations, the use of AI tools in daily workflows, stronger Medicare scrutiny, and the growing pressure on office managers, administrators, compliance leads, and practice owners to manage more responsibilities with fewer resources.Key Topics:How cybersecurity expectations are changing for medical practices.Why AI tools create new risks for privacy, security, documentation, and oversight.How Medicare scrutiny, fraud and abuse concerns, and billing compliance pressures affect daily operations.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: June 2, 2026.

Hospice, Home Health, and Medicare Fraud: Why CMS Is Taking Action highlights the growing compliance, billing, enrollment, and audit risks facing hospice and home health organizations as CMS increases scrutiny across these sectors. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss CMS's recent six-month nationwide freeze on new Medicare enrollments for hospice and home health agencies as part of a broader effort to address fraud, waste, and abuse. The discussion explains why these areas are under increased review and what legitimate healthcare organizations should do now to strengthen their compliance programs, documentation practices, and audit readiness.Key Topics:How CMS's enrollment freeze affects hospice and home health agencies.Why hospice and home health organizations are facing increased scrutiny related to fraud, waste, and abuse.Why audit readiness, internal monitoring, and strong compliance systems are critical in today's enforcement environment.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: May 26, 2026.

No Surprises, Big Disputes: Lessons from the Aetna and Radiology Partners Case highlights the operational, billing, and compliance challenges healthcare organizations may face when payer reimbursement disputes escalate under the No Surprises Act. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss the recent Aetna and Radiology Partners dispute as a real-world example. The discussion explains how reimbursement disagreements, billing practices, documentation gaps, and the Independent Dispute Resolution process can create compliance and operational concerns for healthcare providers, payers, and billing teams.Key Topics:How the No Surprises Act affects healthcare billing operations and out-of-network payment disputes.Why clear documentation, payer contract awareness, billing transparency, and internal review processes matter.How healthcare organizations can identify when payment disputes may become compliance risks.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: May 19, 2026.

A Breach Is More Than an IT Problem: HIPAA, Ransomware, and Patient Trust highlights the serious compliance and operational risks healthcare organizations face when a ransomware attack exposes patient information or disrupts patient care. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss the recent Hospital Caribbean Medical Center data breach as a real-world example. The discussion explains why ransomware must be treated as more than an IT issue, since it can affect HIPAA compliance, breach notification, patient trust, documentation, operations, and leadership response.Key Topics:How ransomware can disrupt patient care and expose protected health information.Why healthcare organizations must prepare with risk assessments, training, access controls, and incident response planning.How strong documentation and clear communication can help protect patient trust after a cyber incident.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: May 12, 2026.

Offshoring Healthcare Data: HIPAA Risks, Vendor Liability, and the Mirra Health Case highlights the growing compliance risks healthcare organizations face when protected health information, claims data, or regulated functions are handled by oversea vendors.In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss the difference between using domestic resources, such as Puerto Rico-based support, and overseas resources where U.S. regulators may have limited enforcement reach. Using the recent Mirra Health case as a real-world example, the discussion explains how unclear data flows, weak vendor oversight, Business Associate Agreement concerns, and "No Offshoring" contract clauses can create serious liability for healthcare organizations.Key Topics:How offshoring healthcare data can create HIPAA and vendor liability risks.Why covered entities may still be responsible when vendors mishandle patient data.How organizations can strengthen vendor review, data-flow documentation, and contract protections.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: May 5, 2026.

Can you Bill for a No-Show? Missed Appointment Fees and Insurance Billing Risks highlights a common but often misunderstood issue in healthcare operations: the difference between charging a patient a missed appointment fee and billing insurance for a service that was never provided.In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how no-show policies can create compliance risk when they are not clearly written, properly communicated, or aligned with payer rules, The discussion focuses on the importance of documentation, patient notices, internal policies, and avoiding billing practices that may raise fraud, abuse, or reimbursement concerns.Key Topics:How missed appointment fees differ from billable healthcare services.Why billing insurance for a no-show can create compliance and fraud concerns.How practices can strengthen no-show policies, documentation, and patient communication to reduce risk.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: April 28, 2026.

Healthcare Realities: Challenges and a Plan of Action is a reminder that success in today's healthcare environment is not only about delivering quality care; it is about building practical systems that help organizations survive increasing operational, financial, and compliance pressure. As insurance rules become more complex, patient costs rise, legislative relief remains limited, and HIPAA expectations continue to expand, healthcare organizations need a clear plan that protects both patient care and business stability.In this session, Ray Walters (EPICompliance) and special guest Dr. Jose Delgado (CEO of EPICompliance), discuss real-world challenges facing healthcare providers and outline practical steps organizations can take to move forward. The conversation explores payer issues, access and coverage concerns, administrative burden, patient communication, and the impact of HIPAA 2026 chances, including risk analysis, vendor oversight, documentation expectations, and security preparedness.Key Topics:How healthcare organizations can respond to growing payer complexity, coverage limitations, rising patient costs, and administrative pressure without losing focus on patient care.How to build a practical plan of action that strengthens daily operations, improves patient outreach, supports staff accountability, and helps leadership identify where the biggest risks and inefficiencies exist.How HIPAA 2026 expectations may effect healthcare organizations, including stronger security risk analysis practices, better vendor oversight, improved documentation controls, and more defensible compliance workflows.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: April 14 , 2026.

Attractive Marketing vs. Insurance Rules: Where Healthcare Promotion Can Cross the Line highlights a serious challenge that continues to affect healthcare organizations today: the risk that marketing language. promotional claims, and service descriptions may go beyond what payer rules, documentation standards, and compliance expectations allow.In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how attractive healthcare marketing can create unintended compliance exposure when it does not align with insurance requirements, reimbursement rules, or regulatory expectations. The discussion focuses on the lessons organizations often overlook and the practical steps leaders can take to market services effectively while reducing risk related to billing, reimbursement, and compliance oversight.Key Topics:How marketing language and promotional claims can create compliance risk when they do not align with payer rules.How service descriptions, benefit statements, and advertising messages can lead to billing, reimbursement, and oversight concerns.How healthcare organizations can strengthen review processes and improve marketing practices while reducing compliance exposure.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: April 7, 2026.

How One Wrong Click Cost a Healthcare Provider $150,000 - And How You Can Avoid the Same highlights a serious challenge that continues to affect healthcare organizations today: cyber-related mistakes that can lead to major financial losses, operational disruption, compliance exposure, and increased risk to patient health information (PHI).In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) are joined by special guest Mr. Paul Blough, CEO of Blough Tech, Inc., to discuss how one wrong click led to $150,000 loss for a healthcare provider and the lessons organizations often miss, and the practical steps leaders can take to strengthen awareness, reduce risk, and better protect healthcare operations.Key Topics:How cyber-related incidents develop, and the red flags organizations often overlook.How a single mistake can create serious financial, operational, and compliance consequences.How organizations can strengthen prevention, awareness, and response efforts to reduce cyber risk.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: March 31, 2026.

When Care Crosses the Line: Nursing Fraud Cases, Red Flags, and Real-World Lessons highlights a serious challenge that continues to affect healthcare organizations today: misconduct that can place patients at risk, undermine trust, and expose providers and organizations to significant compliance, operational, and legal consequences.In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss real nursing fraud cases and the lessons healthcare organizations can take from them. The discussion explores how misconduct happens, the warning signs organizations often miss, and the practical steps leaders can take to strengthen compliance, accountability, and prevention efforts across healthcare settings.Key Topics:How nursing fraud cases develop, and the red flags organizations often overlook.How documentation, billing concerns, and misconduct can create serious risk for patients and providers.How organizations can strengthen prevention, accountability, and compliance efforts.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: March 24, 2026.

What the Show "Scrubs" Got Right: Prior Auths and Delays in Modern Healthcare highlights a frustration that remains very real in healthcare today: too much time spent navigating administrative barriers rather than focusing on patient care.In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how prior authorizations, delays, and paperwork continue to disrupt care, frustrate providers and staff, and create operational challenges across healthcare settings.Key Topics:How prior authorizations delay care and strain workflows.How administrative burdens affect providers, staff, and patients.How organizations can reduce barriers and improve efficiency.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: March 17, 2026.

Payer Contracts in 2026: Negotiate Smarter, Reduce Denials, Protect Revenue is a reminder that payer contracting is not just a financial issue, but also a compliance and operational priority. Healthcare organizations need a clear process for reviewing contract terms, identifying risk, and preparing staff to manage denials, prior authorization requirements, and reimbursement challenges more effectively. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how healthcare organizations can approach payer contracts more strategically in 2026. Topics include identifying high-risk clauses, negotiating terms that reduce denials and recoupments, strengthening documentation and medical-necessity language, and building practical implementation steps that support reimbursement stability and operational consistency.Key Topics:How to identify high-risk payer contract clauses and negotiate terms that better protect revenue.How to strengthen documentation, medical necessity support, and prior authorization and appeal language.How to build practical workflows that improve consistency, defensibility, and cash flow protection.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: March 10, 2026.

Healthcare Compliance Essentials: Responding to Federal Law Enforcement the Right Way is a reminder that responding to federal law enforcement is not only a legal matter, but also a healthcare compliance responsibility. Organizations need clear workflows, trained staff, and strong documentation to verify requests, manage disclosures appropriately, avoid preventable mistakes, and document each step with confidence. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how healthcare organizations can respond appropriately when federal law enforcement becomes involved. Topics include verifying request legitimacy, determining what information may be disclosed, applying minimum necessary standards when appropriate, preventing informal staff disclosures, and building practical response steps that strengthen defensibility without disrupting daily operations.Key Topics:How to confirm the legitimacy of federal law enforcement requests and build a clear internal process for reviewing, routing, and responding to those requests consistently.How to determine what information may be disclosed, when minimum necessary standards apply, and how to reduce the risk of inappropriate or informal disclosures by staff.How to strengthen compliance through documentation, staff training, escalation protocols, and repeatable response workflows that support defensibility and operational control.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: March 3, 2026.

HIPAA 2026: The Practical Roadmap for Compliance Leaders is a reminder that compliance success in 2026 is not about knowing the rules; it is about building repeatable workflows that teams can execute consistently. As expectations continue to shift and operational pressure increases, gaps in training, documentation, incident response, vendor oversight, and AI use can quickly become preventable exposureIn this session, Ray Walters (EPICompliance) and special guest Dr. Jose Delgado (CEO of EPICompliance) walk through the highest-impact risk areas of 2026, including NPP readiness, workforce training execution, documentation controls, incident response preparedness, vendor oversight, and emerging AI-related compliance concerns, and provide clear, operational actions to strengthen defensibility without slowing day-to-day operations.Key Topics:How to prioritize the most urgent compliance controls for 2026, including NPP readiness and the operational steps needed to keep privacy expectations consistent across teams.How to improve execution through role-based training, verification routines, escalation triggers, and repeatable documentation standards that support audit readiness.How to reduce exposure by strengthening incident response workflows, vendor oversight practices, and safe AI use guardrails that protect privacy and support defensible decision-making.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: February 24, 2026.

HIPAA 2026: Required Actions, Proposed Shifts, and Risk Priorities is a reminder that 2026 compliance is not just a policy update; it becomes operational risk fast when requirements aren't translated into clear workflows. As privacy expectations shift, security standards tighten, and AI-driven claim reviews increase, weak documentation and inconsistent oversight create preventable exposure. In this session, Ray Walters (EPICompliance), Jose Delgado Jr. (Taino Consultants), and special guest Dr. Jose Delgado (CEO of EPICompliance) break down the highest-impact 2026 priorities, including NPP readiness, HIPAA Security preparation, workforce training, documentation controls, vendor oversight, incident response, emerging AI risk, and the financial impact of rising denials, into practical steps teams can implement immediately.Key Topics:How to address immediate 2026 priorities, including post-deadline NPP correction steps and clear controls for sensitive information (including SUD-related protections).How to prepare for evolving HIPAA Security expectations by executing core readiness steps now, including Security Risk Analysis (SRA), risk management planning, network mapping and asset inventory, MFA adoption, and vendor contract/BAA verification.How to strengthen defensibility and cash flow stability by building audit-ready documentation routines and denial-resistant workflows, including training verification, escalation triggers, incident logs, and billing process checks to reduce AI-driven denials.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: February 17, 2026.

Romance in the Workplace: Compliance, Boundaries, and Risk Management is a reminder that workplace conduct is not just an HR issue; it is one of the fastest ways for compliance risk to escalate when boundaries are unclear. When relationships cross reporting lines, involve power dynamics, or spill into work channels, organizations can face preventable exposure. In this session, we use workplace-relationship scenarios as real-world risk-control case studies to help healthcare organizations build a repeatable, defensible response workflow that protects people, culture, and operations. Ray Walters (EPICompliance) and Jose Delgado Jr. (Taino Consultants) break down common gaps, including undisclosed reporting-line relationships, favoritism concerns, retaliation risk after breakups, misuse of work communication channels, privacy and documentation failures, and inconsistent manager responses, then translate them into practical controls teams can implement immediately.Key Topics:How to reduce compliance and workplace-risk exposure by defining policy boundaries, disclosure expectations, management ownership, and escalation pathways.How to handle workplace relationships professionally in real time, including supervisor responsibilities, conflict-of-interest controls, anti-retaliation safeguards, and communication-channel boundaries.How to build an audit-ready evidence trail, including disclosure records, management actions, investigation timelines, corrective actions, and a practical do's-and-don'ts playbook with an HR/supervisor decision tree.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: February 10, 2026.

The Rookie S4E17 "Coding: HIPAA, Security, and Patient Safety in a Crisis is a reminder that emergency response is not just a clinical function; it is one of the fastest moments for compliance risk to escalate if teams are not prepared. When a facility becomes unstable, and information is moving quickly, unclear disclosure rules, weak access control, and poor documentation can create preventable exposure. The question auditors and leadership ask later is always the same: "Show what was shared, why it was shared, with whom, and when." In this session, we use The Rookie S4E17 "Coding" as a real-world crisis study to help healthcare organizations build a repeatable, defensible response workflow that protects patients without slowing critical operations. Ray Walters (EPICompliance) and Jose Delgado Jr. (Taino Consultants) break down common emergency-response gaps, including over-disclosure to law enforcement or media, failure to apply minimum necessary in real time, uncontrolled visitor access, hallway conversations, and weak incident documentation, then translate them into practical controls teams can implement immediately.Key Topics:How to protect safety and reduce compliance risk during emergencies by establishing clear disclosure boundaries, command ownership, and rapid decision pathways.How to apply HIPAA and Security Rule expectations in real time, including minimum necessary, role-based information sharing, and access control under pressure.How to build an audit-ready evidence trail during and after a crisis, including incident logs, disclosure rationale, response timelines, escalation triggers, and a practical "first 60 minutes" checklist.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: February 3, 2026.

Smart Start in Healthcare: HR Onboarding + Compliance Essentials is a reminder that onboarding is not just an HR function; it is one of the fastest ways to reduce compliance risk before it turns into an incident. When new hires are onboarded without clear access controls, required training, and documentation, organizations face preventable exposure. The question auditors and leadership ask later is always the same: "Show what you assigned, what was completed, and when."In this session, we use onboarding as a real-world risk-control case study to help healthcare organizations build a repeatable, audit-ready workflow that does not slow down operations. Ray Walters (EPICompliance) and Jose Delgado Jr. (Taino Consultants) break down the most common onboarding gaps, including role-based access delays, incomplete HIPAA training, missing acknowledgements, poor documentation habits, and inconsistent offboarding triggers, and translate them into simple, practical controls your team can implement immediately.Key Topics:How strong onboarding projects patients and reduces compliance risk by establishing defined ownership, role-based access, and minimum required documentation from day one.How to build a minimum viable onboarding checklist for healthcare, including HIPAA readiness, required training assignments, policy acknowledgements, and access provisioning tied to job role.How to create an evidence trail that holds up, including documentation standards, completion verification routines, escalation triggers, and ongoing check-ins during the first 30-90 days.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: January 27, 2026.

Ghost networks are a sharp reminder of how quickly patient access can break down when directories are outdated, ownership is unclear, and "someone else is updating it" becomes the default assumption. When patients cannot find care and complaints start rolling in, the core question becomes simple and urgent: "Prove what you verified, what you updated, and when." Providers, MSOs, and network vendors need more than good intentions. They need a repeatable process and an evidence trail that holds up.In this session, we use ghost networks as a real-world operational risk case study to help healthcare organizations strengthen access integrity without slowing down scheduling or referral workflows. Ray Walters (EPICompliance) and Jose Delgado Jr. (Taino Consultants) break down what causes ghost networks, inaccurate roster data, credentialing and contracting mismatches, stale contact/location details, and vendor handoff failures, and translate them into simple, practical controls your team can implement immediately.Key Topics:How directory errors happen across payers, providers, MSOs, and vendors, and the controls that prevent them (single source of truth, defined ownership, and closed-loop update verification).How access breakdowns become compliance and reputational risks, and the "minimum viable" control set (verification routines, documentation standards, escalation triggers, and audit trails).How payers and regulators evaluate access complaints, and how to build a repeatable workflow for validating listings, updating payers, confirming changes, and preventing repeat incidents.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: January 20, 2026.

Minnesota's recent fraud investigations are a sharp reminder of how quickly Medicaid-funded services can be abused when enrollment is easy, documentation is weak, and ongoing monitoring doesn't keep up. When investigators start asking on core question - "Prove the service actually delivered" - providers need more than good intentions. They need controls and an evidence trail that holds up.In this session, we use Minnesota as a real-world case study to help healthcare and behavioral health organizations strengthen program integrity without slowing down patient care. Ray Walters (EPICompliance) and Jose Delgado Jr. (Taino Consultants) break down the fraud patterns investigators describe, phantom services, inflated claims, unqualified staff, kickbacks, and weak documentation, and translate them into simple, practical controls your team can implement immediately.Key Topics:Unqualified staff, inducements/kickbacks tied to enrollment, and inflated or phantom claims, and the controls that prevent them (credential gatekeeping, supervision proof, and proof-of-service checks).How low barriers + minimal records create high-risk conditions, and "minimum viable" control set (capacity checks, service verification, documentation integrity, and audit trails.Using the "Feeding Our Future" case as an analog to show how investigators follow the same playbook when documentation and oversight fail.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: January 13, 2026.

In this live demo webinar, we introduce EPICompliance Incident Tracking & Whistleblower Reporting and show how healthcare organizations and business associates can run a repeatable, audit-ready workflow without relying on spreadsheets, email threads, or disconnected systems. You'll see how to capture incidents quickly, assign ownership and deadlines, document findings, attach supporting evidence, track corrective and preventive actions, and close cases with clear approvals. Key Topics:How regulators evaluate incident response: consistent intake, clear organization, timely investigation, and documented closure.How to structure anonymous/whistleblower reporting so staff feel safe reporting issues, and leadership can demonstrate non-retaliation and follow-through.See what "good documentation" looks like: interviews, evidence, contributing factors, corrective actions, and a complete audit trail that stands up in a review.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: January 6, 2026.

Most compliance programs don't fail because of a single scandal. They fail because of the small stuff: a patient complaint that wasn't logged, a staff concern that got handled "verbally," a privacy incident that never had a documented report, or a near-miss that wasn't followed through. When regulators ask for your evidence trail, "we talked about it" isn't a system. In this session, we break down what regulators expect from an incident-tracking workflow and a whistleblower reporting process. You'll learn how to create a repeatable, defensible approach that protects staff, reduces escalation risk, and proves your organization takes compliance seriously.Key Topics:Learn how regulators evaluate incident response: consistent intake, clear organization, timely investigation, and documented closure.Understand how to structure anonymous/whistleblower reporting so staff feel safe reporting issues, and leadership can show non-retaliation and follow-through.See what "good documentation" looks like: interviews, evidence, contributing factors, corrective actions, and a complete audit trail that stands up in a review.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: December 30, 2025.

The OSHA + HIPAA training rules are not "nice to have." They're an area where regulators expect clarity, consistency, and proof. And the biggest compliance time-waster in healthcare is debating who is "exempt" from training: front desk, billing, remote staff, contractors, and even owners. Regulators don't evaluate training by job title. They evaluate whether you identified real risk, trained the appropriate people, and can prove it with consistent documentation. In this session, we break down what OSHA and HIPAA actually expect in plain language and translate it into a practical approach your clinic, billing company, or business associate can implement right away. Using the framework developed by Taino Consultants and the tools inside EPICompliance. Key Topics:Learn how OSHA and HIPAA training expectations tie to job duties, exposure, and operational reality - not titles.Understand what triggers Bloodborne Pathogens training (occupational exposure) and why Hazard Communication may apply even when staff "don't touch blood."See what an effective security awareness and training program looks like, including management, remote staff, and contractors - and how to document it.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: December 23, 2025.

The HIPAA Security 2025 Proposed Changes are not just "regulatory noise." They signal a major reset in what regulators will expect to see when it comes to protecting ePHI. Annual asset inventories, updated risk analyses, required multi-factor authentication, stronger encryption expectations, tighter vendor oversight, and real incident response testing all point to one thing: "good enough" security will not hold up. In this session, we break down the Proposed HIPAA Security Rule updates in plain language and translate them into real-world steps for clinics, billing vendors, and business associates. Using the framework developed by Taino Consultants and the tools inside EPICompliance.Key Topics:What's changing and why it matters: Understand the proposed HIPAA Security Rule updates and how they raise the bar for safeguards, documentation, and proof of compliance.Turning requirements into an action plan: Build a practical 6-12 month roadmap covering asset inventory, risk analysis refresh, MFA rollout, encryption decisions, and vendor controls.Operationalizing incident readiness: Learn what incident response testing looks like in real life, how to document it, and how to close gaps with measurable follow-up.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: December 16, 2025.

When healthcare compliance is treated as a "department problem" rather than a shared responsibility, gaps emerge in policies, workflows, and day-to-day decisions, putting patients and organizations at risk. This webinar explores what true compliance accountability looks like across leadership, providers, staff, and vendors, and how to connect regulations to real roles and behaviors. You'll see how to move beyond checklists and annual training so compliance becomes something people actually own, not just something they sign off on.Key Topics:Clarify who owns what in your compliance program by mapping responsibilities across executives, clinical teams, front office, IT, HR, and external vendors, so accountability is visible and not assumed.Learn how to turn policies and regulations into practical workflows, expectations, and documentation that match real operations, making it easier to show "who did what, when, and how" during audits or investigations.See how to build a culture of accountability without fear by using metrics, follow-up, and communication that encourage staff to report issues early, support corrective actions, and treat compliance as part of quality care, not a punishment when something goes wrong.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: December 9, 2025.

When a major internet provider like Cloudflare has an outage, many healthcare organizations discover the hard way that their "mission-critical" systems are only as reliable as the invisible vendors behind them. This webinar uses the recent Cloudflare incident as a real-world case study to show how availability fits into the HIPAA Security Rule, why third-party and "fourth-party" dependencies belong in every risk analysis, and how to prepare so the next big internet disruption is a controlled event, not a scramble.Key Topics:Use the Cloudflare outage as a practical, real-world example of how infrastructure failures affect patient portals, telehealth, logins, and day-to-day healthcare operations, and why availability is a compliance issue, not just an IT headache.Connect the dots between the HIPAA Security Rule's requirements for availability, risk analysis, and contingency planning, and learn how to document third- and fourth-party dependencies in a way that stands up to audits and real incidents.Walk through practical, non-technical steps to strengthen downtime planning, vendor oversight, and internal communication so your teams know exactly what to do the next time "the internet breaks."Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: December 2, 2025.

When your compliance program lives inside EPICompliance, every form you complete becomes part of your evidence trail. In this practical session, we focus on some of the more complex EPICompliance forms and walk you through completing them step-by-step. You'll see what each field is really asking, how to avoid common mistakes, and how to make sure your entries match what is actually happening in your day-to-day operations. The goal is more clarity, faster form completion, and stronger, audit-ready documentation across your entire compliance program.Key Topics:Walk through complex EPICompliance forms field by field, including compliance program setup, Security Risk Assessment inputs, incident and breach logs, and Business Associate documentation, with clear explanations of what belongs in each section.Compare examples of "good" entries versus common mistakes so you can document real-world operations accurately, avoid inconsistencies, and strengthen your evidence in case of audits or investigations.Build a repeatable approach to completing and updating forms that improves consistency across your organization, reduces rework, and ensures your EPICompliance data supports HIPAA, OIG, and payer expectations.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: November 25, 2025.

When AI enters clinical and administrative workflows, privacy rules and safety expectations come with it. In this practical session, we translate HIPAA requirements into plain English and apply an "AI-assisted, not AI-controlled" model to real-world scenarios. You'll see how to use AI tools without disclosing more PHI than necessary, how to apply Minimum Necessary and de-identification in everyday workflows, and how to keep clinicians clearly in charge. Key Topics:Identify appropriate AI use cases in healthcare and apply Minimum Necessary, de-identification, and data minimization in each workflow.Know when a Business Associate Agreement (BAA) is required, what to ask vendors about data use, logging, and model training, and how to build clear audit trails for scribe, coding, and prior auth tools.Close policy gaps, monitor accuracy and drift, and retain evidence for six years to satisfy HIPAA and payer expectations.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: November 18, 2025.

When AI enters clinical and administrative workflows, benefits and risks arrive together. This practical session, we translate HIPAA and safety expectations into plain English and apply an "AI-assisted, not AI-controlled" model to everyday use cases. You will see where AI delivers real gains, what can go wrong without human review, and the simple guardrails that keep care safe and liability low. We showcase to to require from vendors, how to document human-in-the-loop decisions, how to prevent algorithm-only denials and upcoding, and where to file proof so you are audit-ready. Key Topics:Pick the right AI use cases, set human-in-the-loop checkpoints, and document a one-line reconciliation note in the record.Require transparency and compliance from vendors, including BAAs when PHI is involved, data minimization, and clear audit trails for coding, prior auth, and scribe tools.Close policy gaps, monitor accuracy and drift, and retain evidence for six years to satisfy HIPAA and payer expectations.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: November 11, 2025.

When leases end, copier/MFP hard drives can walk out the door with ePHI. In this practical session, we translate HIPAA device/media controls into plain English and apply NIST SP 800-88 (Clear, Purge, Destroy) to everyday returns, swaps, and disposals. You'll see what to require from vendors, how to verify sanitization, how to document chain of custody, and where to file proof so you're audit-ready. Key Topics:Choose the right NIST 800-88 method for copiers and MFPs.Demand proper documentation (method, verification, serials, chain of custody).Close policy gaps and retain proof for six years to satisfy HIPAA.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: November 4, 2025.

Every October, some compliance stories are just too haunting to forget. This session reveals recent HIPAA breach cases to show exactly where controls failed and what would have prevented the incident. We'll cover phishing and access control gaps, missing or weak audit trails, vendor and copier/MFP risks, and documentation shortfalls. Key Topics:Real breach case reviews and what failed at each step.Regulator responses: investigations, settlements, and corrective action plans.How to lock the front doors: phishing defense, access controls, and audit logging that sticks.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: October 28, 2025.

This session is designed to cut through the noise on three major forces shaping healthcare in 2026. We'll translate heightened noncompete scrutiny into actionable talent and contracting strategies, unpack the Medicare prior authorization pilots and their operational ripple effects, and clarify how the 2026 Medicare Physician Fee Schedule may affect access, documentation, and margins. You'll leave with a focused 90-day action plan and a practical checklist for contracts, workflows, and analytics designed to protect your organization and keep operations running smoothly.Key Topics:Understand the impact of increased noncompete enforcement on provider contracts, retention strategies, and organizational risk.Prepare for new Medicare prior authorization pilots and learn how to strengthen workflows, data tracking, and appeals readiness.Assess the 2026 Physician Fee Schedule changes to anticipate revenue shifts, documentation demands, and compliance implications.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠Originally Recorded: October 21, 2025.

The 2026 HIPAA Security Rule introduces significant updates to Business Associate Agreements (BAAs), raising the bar for compliance and security. In this session, we'll break down the critical changes, including the mandatory encryption, multi-factor authentication (MFA) requirements, stricter risk analysis, and enhanced oversight of business associates. You'll learn how to revise your BAAs to meet these new requirements, implement effective controls, and reduce your organization's exposure to compliance risks.Key Topics:Identify which BAA clauses must be updated first, encryption/MFA, incident reporting timelines, subcontractor "flow-down" obligations, and termination-for-cause language.Translate the new risk analysis and ongoing monitoring expectations into practical BA oversight, evidence logs, attestations, and remediation tracking that satisfy auditors.Implement a step-by-step playbook to renegotiate, execute, and operationalize revised BAAs without disrupting patient care, revenue cycle operations, or vendor relationships.Resources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠Originally Recorded: October 14, 2025.

This session translates shutdown mechanics into clear operational steps for providers, payers, and life science teams. We'll map what typically continues under "excepted" operations, what slows or pauses, and how to maintain stability in revenue, compliance, and patient care until complete government services resume. Walk away with a practical checklist to safeguard cash flow, protect deadlines, and communicate confidently with staff and patients.Key Topics:Discover which authorizations, audits, and reconsiderations are most likely to move forward during a shutdownKeep your practice in compliance with limited regulatory capacity, including incident response, BA oversight, and record retentionLearn how to manage communications and actions with manufacturers, sponsors, and academic partners when FDA reviews, trials, or federal grants are delayed or pausedResources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠Originally Recorded: October 7, 2025.

This session explores what a HIPAA Security Risk Analysis (SRA) truly requires, and what it doesn't. We'll unpack the Top 10 myths (like "my EHR vendor handles it" or "we did one year ago, so we're covered") and show how those misconceptions lead to fines, audit exposure, and real security gaps. You'll leave with a clear view of your legal obligations under the Security Rule, the pitfalls to avoid, and practical steps to safeguard ePHI. Our expert speakers, joined by Dr. Jose I. Delgado, CEO of EPICompliance walk through how to recognize and correct SRA errors and implement controls that actually reduce risk.Key Topics:Identify and debunk common SRA myths, and align with what the Security Rule really requiresRight-size your SRA scope, method, and documentation to meet OCR expectationsImplement actionable controls that lower risk while supporting patient careResources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠Originally Recorded: September 30, 2025.

This session explores how healthcare practices can capture revenue from lifestyle medicine services, highlighting practical strategies for billing, documentation, and compliance. Many practices recognize the value of nutrition, exercise, stress management, and behavioral interventions but struggle to translate these visits into sustainable revenue streams. When lifestyle medicine isn’t properly documented or billed, practices risk leaving revenue on the table while missing opportunities to improve patient outcomes. This episode explores real-world strategies to maximize reimbursement, integrate innovative care models, and strengthen the financial sustainability of lifestyle-focused services in primary care.Key Topics:Identify coding opportunities for lifestyle medicine encountersAlign documentation with compliance standardsMaximize reimbursement while preserving patient-centered careResources:Learn more about healthcare compliance systems: ⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠Originally Recorded: September 23, 2025.

This session explores the high cost of delayed care for underserved populations, highlighting how systemic barriers, such as limited transportation, inadequate coverage, and low health literacy, contribute to higher costs and unpaid services for healthcare providers. When care is delayed, patient outcomes suffer, but financial impacts on providers and health systems can be just as severe. This episode explores real-world strategies to address the issue and its financial fallout, focusing on improving patient access and strengthening the financial health of healthcare organizations.Key Topics:Recognize patterns of delayed care in vulnerable populationsCalculate the downstream financial impact of untreated conditionsAdopt innovative solutions, including care coordination, telehealth, and community partnerships, to bridge the gapResources:Learn more about healthcare compliance systems: ⁠⁠⁠epicompliance.com⁠⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠Originally Recorded: September 16, 2025.

How to Keep Coding Mistakes from Becoming Compliance Nightmares. This session explains how a $25 million overbilling allegation tied to "coding errors" at The Villages Health turned into a cautionary tale for providers. Employers, payers, and regulators don't see mistakes the same way you do; coding slips can escalate into compliance risks or even fraud accusations. This webinar breaks down what went wrong, how payers scrutinize claims, and what you can do to protect your organization. Key Topics:Recognize the compliance, coding, and regulatory red flags in the Florida Blue caseUnderstand why accurate coding is non-negotiable for providers and staffLearn practical steps to prevent costly mistakes, and avoid the appearance of fraudResources:Learn more about healthcare compliance systems: ⁠⁠epicompliance.com⁠⁠Explore healthcare compliance training and weekly webinars: ⁠⁠epicompliance.com/training-in...⁠⁠Originally Recorded: September 9, 2025.

Degrees vs. Certification: Which Opens More Doors in Healthcare? This session explains how employers actually weigh degrees and certifications - and what that means for your next role, raise, or promotion. Degrees establish baseline competency, regulatory eligibility (licensure), and credibility; certifications signal current, job-ready skills that differentiate candidates once they're in the workforce. Key Topics:Understand why degrees provide licensure and baseline eligibility in healthcareSee how targeted certifications demonstrate current skills and create an edge for advancementLearn a simple degree-plus-certification plan to showcase results and earn promotionsResources:Learn more about healthcare compliance systems: ⁠epicompliance.com⁠Explore healthcare compliance training and weekly webinars: ⁠epicompliance.com/training-in...⁠Originally Recorded: September 2, 2025.

Future Proofing Your Practice – Strategic Business Planning for 2026 is designed to equip healthcare leaders with the foresight and tools to balance growth, compliance, and sustainability. In this session, our expert speakers outline a roadmap to anticipate regulatory changes, strengthen revenue strategies, and build resilient teams that can adapt to evolving industry demands. Healthcare organizations will gain actionable strategies to safeguard patient data, meet compliance expectations, and ensure financial stability while preparing for 2026 and beyond.Key Topics:Anticipating and adapting to regulatory changeDriving financial growth with compliance in mindBuilding strong, resilient healthcare teamsResources:Learn more about healthcare compliance systems: epicompliance.comExplore healthcare compliance training and weekly webinars: epicompliance.com/training-in...Originally Recorded: August 26, 2025.

Maximizing Your Collections: Inside MedXPrime’s Proven Recovery Process brings you expert strategies to reclaim lost revenue and strengthen financial performance in healthcare organizations. In this episode, our speakers—joined by Sunil Wadhwa, Founder & CEO of MedXPrime Revenue Recovery—share how providers and administrators can recover old and denied claims, streamline billing, and reduce administrative strain while staying compliant. This practical discussion gives you the tools to maximize collections and protect your bottom line without sacrificing compliance.Key Topics:Proven methods to recover old and denied claimsStreamlining billing for efficiencyReducing administrative burden while boosting collectionsResources:Learn more about healthcare compliance systems: epicompliance.comExplore healthcare compliance training and weekly webinars: epicompliance.com/training-in...Originally Recorded: August 19, 2025.

Inside the Recipe: How EPICompliance Built a Program That Works takes you behind the scenes to explore the essential “ingredients” of a sustainable compliance program. In this episode, our expert speakers—joined by Julie Riga, ICF-ACC Certified Leadership Coach and former Pharmaceutical Executive—share proven strategies healthcare organizations can use to safeguard patient data, reduce risk, and strengthen compliance without overwhelming their teams. Whether you’re an administrator, compliance officer, or provider, you’ll gain actionable insights to build systems that truly work.Key Topics:Core “ingredients” of a successful compliance programReducing risk while avoiding team burnoutBuilding scalable, sustainable compliance systemsResources:Learn more about healthcare compliance systems: epicompliance.comExplore healthcare compliance training and weekly webinars: epicompliance.com/training-in...Originally Recorded: August 12, 2025.

The U.S. Department of Justice’s investigation into UnitedHealth and the Medicare Advantage program has sent shockwaves through the healthcare industry. In this episode, The DOJ vs. Medicare Advantage: What the UnitedHealth Investigation Means for You, our expert speakers break down allegations of upcoding and overdiagnosing that artificially inflate patient risk scores and federal reimbursements. Learn what the DOJ is really targeting, how these findings could redefine compliance expectations, and the implications for providers, billing teams, MA plans, and business associates nationwide.Key Topics:DOJ’s UnitedHealth investigation explainedCompliance risks with upcoding & overdiagnosingImpact on Medicare Advantage compliance programsResources:Learn more about healthcare compliance systems: epicompliance.comExplore healthcare compliance training and weekly webinars: epicompliance.com/training-in...Originally Recorded: August 05, 2025.

Healthcare providers know that diagnostics are the backbone of patient outcomes, but how can smarter lab access drive both efficiency and compliance? In this episode, Revolutionizing Diagnostics: Better Patient Outcomes Through Smarter Lab Access, our expert speakers—joined by Mr. Ryan Obemeier, Chief Commercial Officer for Evexia Diagnostics and former VP of Mergers & Acquisitions for Forum Health—share proven strategies to streamline diagnostic operations, improve clinical workflows, and unlock new revenue opportunities. Designed for providers, administrators, and compliance leaders, this session highlights the critical intersection of compliance, efficiency, and patient-centered care.Key Topics:Optimizing lab integration for healthcare providersEnhancing efficiency through smarter diagnosticsDriving growth with service line optimizationResources:Learn more about healthcare compliance systems: epicompliance.comExplore healthcare compliance training and weekly webinars: epicompliance.com/training-in...Originally Recorded: July 29, 2025.

Healthcare organizations face a growing challenge: where does compliance stop and true cybersecurity begin? In this episode, Bridging the Gap: Where Compliance Ends and Cybersecurity Begins, our expert speakers—joined by special guest Mr. Nicholas Saucier, Director of Cybersecurity for OneAxiom and former U.S. Army Sniper—examine recent healthcare breaches to reveal the gaps compliance alone can’t cover. This session highlights real-world vulnerabilities and provides practical strategies clinics can implement to strengthen defenses without unnecessary complexity. Designed for providers and administrators, it’s a must-watch for balancing regulatory compliance with cybersecurity resilience.Key Topics:Lessons from recent healthcare breachesIdentifying compliance vs. security gapsPractical cybersecurity strategies for clinicsResources:Learn more about healthcare compliance systems: epicompliance.comExplore healthcare compliance training and weekly webinars: epicompliance.com/training-in...Originally Recorded: July 22, 2025.

The healthcare cybersecurity landscape is undergoing a major transformation. In this episode, HIPAA Security Rule 2025: What You Need to Know About the Cybersecurity Overhaul, our expert speakers break down the critical updates every provider and business associate must prepare for. From mandatory multi-factor authentication to advanced encryption standards, this session offers a step-by-step roadmap to strengthen compliance and minimize risk. Designed for healthcare professionals, it provides actionable strategies to align with NIST guidelines, conduct effective risk analyses, and secure sensitive patient data.Key Topics:Mandatory MFA & encryption requirementsRisk analysis updates for 2025NIST alignment for HIPAA complianceResources:Learn more about healthcare compliance systems: epicompliance.comExplore healthcare compliance training and weekly webinars: epicompliance.com/training-in...Originally Recorded: July 15, 2025.