“Now, we are well on our way to understanding and acting on what we have to do to safeguard PHI and become fully HIPAA-compliant. Most of all, we realize SRAs are mandatory, and we’re taking action to protect our patients’ information – and our business.”

“Invest in staff training. You can throw all sorts of technology at the issue - firewalls and encryption for example - but we found that staff awareness and behaviors were our weakest link. Employees need to be trained by experts such as ClearDATA. If employees are taping passwords to their …