The Cost of a Healthcare Data Breach: Prevention, Response, and Legal Exposure examines the financial, operational, and legal consequences healthcare organizations may face after a cybersecurity incident.

In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss the Watson Clinic data breach and the resulting $10 million settlement related to a 2024 cybersecurity incident that reportedly affected approximately 280,000 individuals.

The discussion focuses on an important compliance principle: the cost of a data breach extends far beyond restoring systems and recovering data.

Healthcare organizations may also face litigation, patient notification expenses, credit or identity monitoring, forensic investigations, regulatory scrutiny, reputational damage, corrective action, and long-term legal costs.

Key Topics:

• The Watson Clinic data breach and resulting $10 million settlement.
• The financial and legal exposure associated with healthcare data breaches.
• Why healthcare organizations should establish a breach-response plan before an incident occurs.

Resources:

• Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

• Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Originally Recorded: September 1, 2026.

The Trusted User Threat: Social Engineering, Contractors, and Healthcare Cybersecurity examines how trusted access can become a major security vulnerability when employees, contractors, vendors, or business associates are targeted by attackers.

In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss the 2026 AdaptHealth cybersecurity incident and other recent healthcare-related breaches involving DentaQuest, Medtronic, and Amazon-owned One Medical Senior Health.

The discussion focuses on a central compliance principle: trusted access does not mean risk-free access. An attacker may not need to defeat sophisticated security controls if they can manipulate a legitimate user, contractor, or help-desk process and gain access through valid credentials or an active session.

Ray and Jose discuss how healthcare organizations can strengthen cybersecurity by reviewing contractor access, multifactor authentication, password security, session management, phishing and vishing awareness, cloud application controls, access termination, incident detection, Business Associate Agreements (BAAs), and third-party security monitoring.

Key Topics:

• Social engineering, phishing, vishing, credential theft, and MFA manipulation.
• Contractor and third-party access, cloud applications, password security, and session management.
• Recent breach examples involving AdaptHealth, DentaQuest, Medtronic, and One Medical Senior Health, along with the growing use of social engineering and identity-based attacks.

Resources:

• Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

• Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Originally Recorded: August 25, 2026.

Remote Patient Monitoring: Managing Vendors, Billing, and Medical Necessity examines the compliance responsibilities healthcare organizations should understand when using remote patient monitoring programs and third-party vendors.

In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) are joined by featured guest and CEO of EPICompliance, Dr. Jose Delgado, to discuss how medical necessity, patient consent, device delivery, billing documentation, staffing capacity, vendor oversight, and privacy and security responsibilities all work together in a compliant RPM program.

The discussion focuses on a central compliance principle: Remote Patient Monitoring is a clinical service supported by technology, and outsourcing technology or operational support does not eliminate the billing provider's clinical, billing, privacy, or oversight responsibilities.

Ray, Jose, and Dr. Delgado discuss how healthcare organizations can strengthen RPM compliance by confirming individualized medical necessity, documenting informed consent, validating devices and data transmission, reconciling vendor records with the medical record and claims, reviewing staffing capacity, monitoring billing patterns, and conducting meaningful vendor due diligence.

Key Topics:

• Medical necessity, patient consent, device delivery, and proper documentation of RPM services.
• Billing requirements, staffing capacity, and the responsibilities of employees, clinical staff, and third-party vendors.
• Vendor oversight, HIPAA privacy and security, and identifying billing or operational warning signs before they lead to audits or enforcement.

Resources:

• Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

• Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Originally Recorded: August 18, 2026.

Medical Device Sales Compliance: Preventing Fraud, Conflicts, and Vendor Abuse examines the warning signs healthcare organizations should recognize when working with medical device companies, sales representatives, distributors, and other vendors.

In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how weak purchasing controls, inadequate vendor oversight, conflicts of interest, poor inventory management, and inappropriate financial relationships can expose healthcare organizations to fraud, inflated costs, kickbacks, false documentation, and patient safety risks.

The conversation also examines the Jacksonville medical device fraud case involving sales representative Scott Michael Weller. According to reporting, Baptist Health alleged that excessive medical device ordering and weaknesses in purchasing and inventory controls contributed to significant losses. The case highlights the importance of comparing purchasing activity with actual clinical utilization, inventory, staffing, and operational needs.

Ray and Jose also discuss how healthcare organizations can strengthen vendor screening, competitive purchasing, conflict-of-interest disclosures, invoice verification, inventory controls, contract monitoring, employee reporting responsibilities, exclusion screening, and responses to suspected fraud.

Key Topics:

• Medical device purchasing and utilization warning signs.
• Invoice verification, inventory controls, competitive purchasing, and contract oversight.
• Employee reporting responsibilities and investigating suspicious vendor activity.

Resources:

• Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

• Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Originally Recorded: August 11, 2026.

Lessons from the 2026 $6.5 Billion Healthcare Fraud Takedown examines the warning signs healthcare organizations should recognize before a compliance concern becomes an enforcement matter.

In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss the 2026 National Healthcare Fraud Takedown, which resulted in charges against 455 defendants connected to more than $6.5 billion in alleged healthcare fraud.

The conversation covers false billing, medically necessary services, kickbacks, controlled substances, durable medical equipment, identity misuse, services that were never provided, and the importance of identifying unusual activity before it becomes a larger compliance problem.

Ray and Jose also discuss how healthcare organizations can strengthen billing oversight, verify medical necessity, monitor employees and vendors, screen for exclusions, investigate concerns, document corrective actions, and address potential overpayments.

Key Topics:

• Billing, documentation, and medical necessity warning signs.
• Employee, provider, contractor, and vendor oversight.
• Auditing, corrective action, overpayments, and active compliance management.

Resources:

• Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

• Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Originally Recorded: August 4, 2026.

Administrators Are People Too: Building Connections Beyond the Office explores the importance of professional relationships, peer support, and community involvement for healthcare administrators.

In this session, Ray Walters (EPICompliance), Mr. Jose Delgado (Taino Consultants), and special guest Ms. Gianni Gonzalez (CEO of Healthcare Management Solutions and Founder and Executive Director of the Florida Association for Healthcare Practices), discuss practical ways administrators can build meaningful professional connections outside the workplace.

The conversation covers attending local event, becoming more comfortable introducing yourself, developing trusted peer relationships, exchanging resources and referrals, and creating a professional networking group when one does not already exist.

Gianni also shares her experience building a local professional community and her vision for expanding it into a valuable resource for healthcare administrators and business professionals.

Key Topics:

• Why professional relationships are important for healthcare administrators.
• How peer relationships can help address workplace challenges.
• The value of sharing knowledge, resources, experiences, and referrals.

Resources:

• Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

• Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Originally Recorded: July 28, 2026.

The Compliance Roadmap for Medical Couriers: Privacy, Safety, and Accountability examines the compliance responsibilities involved in transporting laboratory specimens, medications, medical records, supplies, and other sensitive healthcare materials.

In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss the responsibilities of independent couriers, courier companies, and healthcare organizations. The conversation covers HIPAA confidentiality, chain of custody, secure transportation, temperature control, delivery verification, incident reporting, written agreements, vendor oversight, and determining when a Business Associate Agreement may be required.

Key Topics:

• Why medical courier compliance is important for healthcare organizations.
• How HIPAA, chain-of-custody procedures, and secure transportation requirements may apply.
• The responsibilities of couriers, courier companies, and healthcare organizations.

Resources:

• Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

• Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Originally Recorded: July 21, 2026.

2026 Insurance Upheaval: What Healthcare Practices Need to Watch as ACA Markets Shift examines the changing Affordable Care Act insurance marketplace and what growing uncertainty may mean for healthcare organizations, patients, and providers.

In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss Cigna's announcement that it will leave the Affordable Care Act marketplace after the 2026 plan year, affecting approximately 369,000 members across 11 states. They also explore why major insurance carriers are reconsidering ACA participation and how rising premiums, changing subsidies, narrower plan options, and insurer exits may affect healthcare practices.

Key Topics:

• Why healthcare practices should pay attention to changes in the ACA marketplace.
• How insurance carrier exits may affect patient access, coverage, and continuity of care.
• The importance of monitoring coverage changes and documenting patient communications.

Resources:

• Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

• Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Originally Recorded: July 14, 2026.

HIPAA Security and HR: Managing Workforce Risk Before It Becomes a Breach highlights why HIPAA Security is not just an IT issue and why Human Resources plays an important role in protecting electronic protected health information.

In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how HR decisions can affect HIPAA Security compliance, including hiring, onboarding, role changes, training, discipline, terminations, access management, and workforce clearance.

Key Topics:

• Why HR plays a major role in HIPAA Security compliance.
• How workforce changes can create privacy and security risks.
• Why the HIPAA Security Officer and HR must work together on access, training, sanctions, and documentation.

Resources:

• Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

• Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Originally Recorded: July 7, 2026.

OSHA 2026: Connecting SDS Requirements to SOPs and Daily Compliance highlights why Safety Data Sheets are more than a binder requirement and why healthcare organizations must connect chemical safety information to real workplace procedures, employee training, and daily compliance practices.

In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how SDS requirements support OSHA's Hazard Communication expectations and how healthcare organizations can use SDS records to identify chemical hazards, train employees, follow manufacturer instructions, store products properly, label containers, and respond to exposure or spills.

Key Topics:

• Why Safety Data Sheets must be part of daily operations, not just stored in a binder.
• How SDS requirements connect to SOPs, training, labeling, storage, and exposure response.
• How to keep SDS records accessible and ensure staff know how to use them.

Resources:

• Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

• Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

Originally Recorded: June 30, 2026.