In this episode, Suzanne Spradley and Patrick Myers discuss the growing trend of HIPAA breaches, particularly those that involve ransomware attacks and employee errors. Suzanne points out how the pandemic and the increased use of telehealth encouraged a growing reliance on electronic transmission and data. Suzanne and Patrick discuss HIPAA privacy law, recent updates to the law, its notification requirements, and the Health Risk Assessment requirement. Finally, the two close by discussing enforcement actions, penalties, and common violations that result in fines imposed by the federal government.