CoreFolio Learn
What OCR is actually investigating right now, and how small practices end up on the wrong end of a settlement.
OCR is now investigating small practices that have never had a breach — because they never did a risk analysis. Here is what changed in late 2024, what the rule actually requires, and what a defensible answer looks like.
12-minute read
HHS's Office for Civil Rights has now settled with dozens of practices for risk analysis failures. The pattern in their investigation letters and resolution agreements tells you exactly what they are looking for.
5-minute read
OCR has published more than 100 resolution agreements over the past decade. The findings in those agreements follow a consistent pattern. Here is what investigators actually find — and what it means for your practice.
5-minute read