HIPAA Insider

HIPAA compliance is entering a new era—and 2026 will mark a major turning point.

In this episode of the HIPAA Insider Show, Adam Z. and HIPAA Vault CEO Gil Vidals break down the upcoming modernization of the HIPAA Security Rule and the growing wave of AI disclosure regulations impacting healthcare organizations.

As key safeguards shift from “addressable” to required, and states introduce stricter rules around AI transparency, providers, IT teams, and health-tech companies must rethink how they approach compliance.

We cover:

• What the 2026 HIPAA updates mean in practice
• The shift from recommended to mandatory security controls
• Why multi-factor authentication (MFA) is no longer optional
• “Break Glass” protocols for AI systems and emergency access
• New expectations around AI transparency and accountability
• How to prepare for audits without enterprise-level budgets

If you're handling patient data or deploying AI in healthcare, this episode provides a clear, practical roadmap to stay compliant and reduce risk in the evolving regulatory landscape.

Download the HIPAA Compliance Checklist:
https://www.hipaavault.com/are-you-hipaa-compliant/

Learn more about HIPAA Vault:
https://www.hipaavault.com/

Become a guest on the HIPAA Insider Show:
https://www.hipaavault.com/podcast-guest/

HIPAA compliance doesn’t have to be complex—or expensive.

In this episode of the HIPAA Insider Show, Adam Z. and HIPAA Vault CEO Gil Vidals go back to fundamentals, breaking down the essential tools healthcare practitioners need in 2026 to stay secure and compliant without overspending.

Whether you're a solo provider, private practice, or growing clinic, this episode provides a practical roadmap to modernize your operations safely.

We cover:

• The core tools every practice needs for HIPAA compliance
• Securing email and document collaboration with platforms like Google Workspace
• Protecting your website with HIPAA-compliant hosting
• When to implement advanced solutions like patient intake forms
• Using HIPAA SFTP for secure, large data transfers

If you’re looking to simplify compliance while leveraging modern technology, this episode shows how to build a secure, cost-effective foundation for your practice.

Learn more about HIPAA Vault:
https://www.hipaavault.com/

Become a guest on the HIPAA Insider Show:
https://www.hipaavault.com/podcast-guest/

You’ve built your healthcare app with AI. The MVP works. The “vibe” is right.

But now comes the critical step: making it secure and HIPAA-compliant for real patient data.

In this episode of the HIPAA Insider Show, Adam Z. and HIPAA Vault CEO Gil Vidals move beyond theory and into execution—breaking down the exact framework used to transform AI-built applications into production-ready, compliant systems.

After exploring data strategy, synthetic data, and security gaps in previous episodes, this conversation focuses on what founders actually need to do next.

We cover:

• How to migrate AI-built apps into secure, compliant environments
• Identifying and fixing hidden security vulnerabilities
• Validating infrastructure for HIPAA requirements
• Preparing applications to safely handle Protected Health Information (PHI)
• Launching without building a full DevOps or security team

If you’ve built an app using tools like Replit, Cursor, or v0, this episode provides a practical roadmap to go from prototype to secure production.

🔐 Learn more about HIPAA Vault:
https://www.hipaavault.com/

🎙 Become a guest on the HIPAA Insider Show:
https://www.hipaavault.com/podcast-guest/

AI is accelerating how healthcare applications are built—but it’s also exposing a growing gap between innovation and security.

In this episode of the HIPAA Insider Show, Adam Z. sits down with Mike Armistead, CEO of Pulse Security AI and a serial tech entrepreneur with over 30 years of experience, to explore how AI-assisted coding is reshaping healthcare development—and what it means for security and compliance.

We discuss:

• How AI-assisted coding is changing the way healthcare apps are built
• The emerging “security value gap” between tools and real business risk
• Why traditional security approaches are falling short
• What a true system of record for security leaders looks like
• Key trends founders and IT professionals need to watch

If you're building or managing healthcare technology, this episode highlights how to balance speed, innovation, and security in an AI-driven landscape.

Learn more about Pulse Security AI:
https://pulsesecurity.ai/

Security Impact Circle:
https://www.securityimpactcircle.org/

Learn more about HIPAA Vault:
https://www.hipaavault.com/?utm_source=spotify&utm_medium=podcast&utm_campaign=mike_armistead

In healthcare, signing a Business Associate Agreement (BAA) is only the beginning.

To safely deploy AI, organizations must go beyond paperwork and implement privacy-preserving technologies (PETs) that protect patient data at the architectural level.

In this episode of the HIPAA Insider Show, Adam Z. is joined by Timothy Nobles to explore how healthcare leaders can innovate with AI while maintaining trust, security, and compliance.

We cover:

• Why BAAs alone are not enough for modern healthcare AI

• How synthetic data enables safe development and testing

• The role of differential privacy in protecting sensitive information

• Practical ways to build privacy guardrails into AI systems

• How clinics, MSPs, and health-tech teams can innovate without exposing PHI

If you're working with AI in healthcare, this episode provides a roadmap for moving from checkbox compliance to real data protection.

Learn more about Integral:
https://www.useintegral.com/

Connect with Timothy Nobles:
https://www.linkedin.com/in/timothynobles

Learn more about HIPAA Vault:
https://www.hipaavault.com/?utm_source=spotify&utm_medium=podcast&utm_campaign=timothy_nobles

Become a podcast guest:

https://www.hipaavault.com/podcast-guest/?utm_source=spotify&utm_medium=podcast&utm_campaign=timothy_nobles

AI coding tools are enabling a new wave of healthcare innovators. Doctors, clinicians, and founders are now “vibe coding” applications using tools like Replit, Cursor, and v0—rapidly building MVPs with the help of large language models.

But what happens when those apps start handling real patient data?

In this episode of the HIPAA Insider Show, host Adam Z. and HIPAA Vault CEO Gil Vidals explore how healthcare innovators can safely move from an AI development sandbox to a secure, HIPAA-compliant production environment.

They discuss:

• The rise of “vibe coding” in healthcare startups
• The risks of handling PHI in AI-generated applications
• The Safe Landing Zone strategy for compliant deployment
• Using “Magic Prompts” to document AI-generated tech stacks
• Why serverless architecture can help meet enterprise security standards while keeping infrastructure costs low
• How founders can launch secure healthcare apps without building a full DevOps team

If you’ve built an AI-powered healthcare MVP and are ready to scale responsibly, this episode provides a practical roadmap for bridging the gap between rapid innovation and HIPAA compliance.

Learn more about HIPAA Vault:
https://www.hipaavault.com/?utm_source=spotify&utm_medium=podcast&utm_campaign=vibe_coding

Become a guest on the HIPAA Insider Show:
https://www.hipaavault.com/podcast-guest/?utm_source=spotify&utm_medium=podcast&utm_campaign=vibe_coding

Artificial intelligence is rapidly transforming healthcare—but without the right data strategy, innovation can quickly turn into a compliance nightmare.

In this episode of the HIPAA Insider Show, Adam Z. sits down with Franck Leveneur, CEO of Data-Sleek, to discuss how healthcare organizations can bridge the gap between AI innovation and HIPAA compliance.

They explore why many healthcare AI initiatives fail and why a data-first strategy is essential for protecting Protected Health Information (PHI) while enabling scalable AI development.

The conversation also dives into the emerging trend of “Vibe Coding”—using large language models to generate software—and why this approach can create serious risks for data integrity, governance, and regulatory compliance in healthcare environments.

Topics covered include:

• Why healthcare AI projects fail• The importance of data governance and architecture• Protecting PHI in AI-driven systems• The risks of “Vibe Coding” in regulated industries• Building AI responsibly in healthcare

If you're building healthcare technology, deploying AI, or managing sensitive health data, this episode highlights the strategies needed to innovate without compromising compliance.

Learn more about Data-Sleek:
https://data-sleek.com

Learn more about HIPAA Vault:
https://www.hipaavault.com/?utm_source=spotify&utm_medium=podcast&utm_campaign=franck_leveneur

Become a podcast guest:

https://www.hipaavault.com/podcast-guest/?utm_source=spotify&utm_medium=podcast&utm_campaign=franck_leveneur

What separates a service-based health-tech company from a scalable, high-valuation SaaS platform?

In this episode of the HIPAA Insider Show, Adam Z. welcomes Ghazenfer Mansoor, CEO & Founder of Technology Rivers, to break down the strategic roadmap from custom services to enterprise-ready SaaS.

With over 15 years of experience building AI-driven, HIPAA-compliant platforms, Ghazenfer shares:

• Why most health-tech software projects fail

• The compliance architecture investors and enterprise buyers expect

• How security maturity impacts valuation

• The transition from project-based revenue to recurring SaaS growth

• How healthcare organizations can prepare for the AI revolution

If you’re building, scaling, or investing in digital health, this episode explains why compliance isn’t a cost center — it’s a valuation multiplier.

Learn more about Ghazenfer:
https://ghazenfer.com/

Technology Rivers:
https://technologyrivers.com/

Learn more about HIPAA Vault:
https://www.hipaavault.com/?utm_source=spotify&utm_medium=podcast&utm_campaign=chazenfer-mansoor

Filling out a security questionnaire doesn’t mean you’re secure.

In healthcare and digital health, startups often spend weeks checking “Yes” on 300-row spreadsheets — believing that equals compliance. But enterprise buyers are looking for something very different: proof of security maturity.

In this episode of the HIPAA Insider Show, Adam Z. sits down with Larry Trotter II, Founder of Inherent Security, to unpack:

• Why “HIPAA Compliant” tech still fails enterprise security reviews

• The dangerous gap between questionnaire responses and operational reality

• What healthcare buyers are actually evaluating

• Why checkbox compliance silently kills deals

• How to demonstrate real security maturity

If you sell into healthcare, this episode may explain why deals stall — even when you answered every question correctly.

Connect with Larry Trotter II:
https://www.linkedin.com/in/larry-trotter-ii

Inherent Security:
https://www.inherentsecurity.com/

Learn more about HIPAA-compliant infrastructure:
https://www.hipaavault.com/?utm_source=spotify&utm_medium=podcast&utm_campaign=larry-trotter-ii

Interested in being a guest on the HIPAA Insider Show?
https://www.hipaavault.com/podcast-guest/?utm_source=spotify&utm_medium=podcast&utm_campaign=larry-trotter-ii

Most AI tools being used in healthcare today are not compliant with 42 CFR Part II — and that creates serious legal and regulatory risk.

In this episode of the HIPAA Insider Show, host Adam Zeineddine sits down with former federal regulator and national security professional Sam Hart, founder of Hathr.AI, to unpack what healthcare organizations must understand before deploying Generative AI.

We cover:

• Why standard AI platforms fail 42 CFR Part II requirements

• The difference between FedRAMP Moderate vs. FedRAMP High

• When GovCloud environments are necessary

• How substance use disorder (SUD) data triggers stricter federal controls

• What a legally defensible AI architecture actually looks like

If your organization handles behavioral health or SUD data, this episode explains how to innovate with AI without violating federal law.

Connect with Sam Hart:
https://www.linkedin.com/in/samuel-e-hart/

Learn more about HIPAA-compliant infrastructure with HIPAA Vault:
https://www.hipaavault.com/?utm_source=spotify&utm_medium=podcast&utm_campaign=sam_hart

Interested in being a guest on the HIPAA Insider Show?
https://www.hipaavault.com/podcast-guest/?utm_source=spotify&utm_medium=podcast&utm_campaign=sam_hart