The Healthcare Compliance Step-By-Step Podcast · EPICompliance

#122 - HIPAA 2026: Required Actions, Proposed Shifts, and Risk Priorities

·1 hr 5 min·4 clips

HIPAA enforcement just started—understand the difference between effective and enforcement dates before you're penalized.

Expert HIPAA compliance discussion covering critical 2026 changes. Covers enforcement of privacy rule changes (substance use disorder confidentiality alignment), impending May 2026 security requirements including massive security management plans, and business associate compliance. Provides actionable roadmap: complete SRA immediately, designate CHSO, audit business associates. Emphasizes that 70% of HIPAA security is administrative/training, not IT. Addresses multi-location practice complexity and office manager burden. Practical templates available through EpiCompliance.

As heard by us

HIPAA compliance is framed as a real operating cost, with the 2026 updates centered on practical readiness.

HIPAA compliance is treated here as an operating cost, not a binder on a shelf. Dr. Jose Delgado, Ray Walters, and Jose Delgado Jr. keep the focus on what a practice actually has to budget for: business associate agreements, notice of privacy practices, security staffing, and…

Read the full review in PlayNext →

Why you'd press play

Trying to price HIPAA before it prices you out?

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from The Healthcare Compliance Step-By-Step Podcast