The VanRein blog
Compliance insights, regulatory updates, and practical guidance — written in plain language by the people who do this work every day. No jargon for jargon's sake, just what you actually need to know.
AI Security Removed, Goes Bad Quickly
RJ O'Connor5 min readBrowse the blog
102 articles from the VanRein team, newest first.
America 250: Built by Individuals
As America approaches her 250th anniversary, it is worth pausing to remember how unlikely this country was at the beginning.
Rob Van Buskirk5 min read
Founder-Led Compliance: Protecting What You’re Building
It is a family-owned, founder-led business built by Rob and Dawn Van Buskirk with a simple belief: companies should not have to feel overwhelmed, exposed, or alone when trying…
Rob Van Buskirk4 min read
Major Upcoming Change: HIPAA Security Rule Overhaul
The most substantial update to HIPAA in over a decade is the proposed rewrite of the HIPAA Security Rule for electronic protected health information (ePHI).
RJ O'Connor4 min read
HIPAA 2.0 Penetration Testing: Organizations Need Pen Testing in 2026
Protected health information is under attack every day. Healthcare providers, business associates, billing companies, software vendors, and other organizations that handle…
VanRein Compliance6 min read
AI Governance: What Is It, Why It Matters
Artificial Intelligence (AI) is everywhere, touching nearly every online interaction and becoming a key efficiency tool in healthcare and beyond. When AI handles sensitive…
RJ O'Connor3 min read
Back From Break: Restarting Compliance in Practice
After a long holiday break, most teams return to overflowing inboxes, task backlogs, and operational catch-up. Policies are still documented, controls are still defined, and…
Junie Talisay3 min read
Ambs Call Center: October 2025 Client of the Month
From its roots as a Physicians Exchange in 1932 to its current role as a trusted call center for healthcare organizations across the U.S., Ambs Call Center has always stood for…
Junie Talisay1 min read
Ding A Ling Answering Service: September 2025 Client of the Month
Some companies promise “customer service.” Ding A Ling Answering Service delivers something rarer: a warm, human experience—every call, every time. As VanRein Compliance’s…
Junie Talisay3 min read
CareHive: August 2025 Client of the Month
At VanRein Compliance, we celebrate organizations that demonstrate not only compliance excellence but also a deep understanding of why it matters. This month, we’re honored to…
Junie Talisay1 min read
Intelligent Technical Solutions: July 2025 Client of the Month
In an era where data breaches and regulatory pressures dominate business conversations, Intelligent Technical Solutions (ITS) is proving that compliance and cybersecurity…
Junie Talisay1 min read
Speed-E'z: June 2025 Client of the Month
Some companies scale fast. Others scale strong. Speed-E'z, VanRein Compliance’s June 2025 Client of the Month, is proudly—and powerfully—both.
Junie Talisay1 min read
HIPAA Glossary: Essential Terms You Need to Know
Understanding HIPAA (Health Insurance Portability and Accountability Act) is essential for businesses handling healthcare data. Whether you're a healthcare provider, business…
Junie Talisay4 min read
The Growing Risk of Third-Party Vendors
In today’s interconnected business landscape, third-party vendors play a vital role in operations, offering essential services from IT support to cloud storage. However, with…
Junie Talisay2 min read
Preparing for Your Next HIPAA Audit: A Guide for First-Timers and Returning Businesses
Ensuring HIPAA compliance is more than just meeting regulatory requirements—it’s about protecting patient data, maintaining trust, and avoiding costly penalties. Whether you’re…
Rob Van Buskirk2 min read
Beyond the First Year: The Value of Ongoing Compliance Maintenance
Achieving compliance is a milestone—but maintaining it is the real key to long-term success. Many organizations focus heavily on the initial setup of their compliance program,…
Junie Talisay2 min read
HHS OCR's $337,750 Settlement Reinforces Need for Robust ePHI Security
In a significant enforcement action underscoring the critical importance of protecting electronic protected health information (ePHI), the U.S. Department of Health and Human…
Junie Talisay2 min read.png)
Strengthening Healthcare Cybersecurity: A Look at the Proposed HIPAA Security Rule Updates
The U.S. Department of Health and Human Services (HHS), via its Office for Civil Rights (OCR), has proposed critical updates to the HIPAA Security Rule. This initiative aims to…
Junie Talisay2 min read
HHS and Delaware Forge Agreement to Uphold Disability Rights
In a significant development announced on December 18, 2024, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR), has reached a resolution…
Junie Talisay2 min read
Embracing the Future of Healthcare: The Role of Remote Receptionists in Modern Medical Practices
In today's digital age, the healthcare industry is evolving rapidly, integrating more remote operations to enhance efficiency and patient care. Remote receptionists are at the…
VanRein Compliance4 min readEnhanced Security Risk Assessment Tool Unveiled by HHS to Bolster ePHI Protection
The Office for Civil Rights (OCR) and the Assistant Secretary for Technology Policy (ASTP) at the U.S. Department of Health and Human Services have recently announced the…
VanRein Compliance2 min read
Navigating the Waters of HIPAA Compliance in the Wake of Ransomware Attacks
In recent settlements that underscore the serious implications of cybersecurity breaches, the Health and Human Services’ (HHS) Office for Civil Rights (OCR) has resolved two…
Junie Talisay2 min read
Why OCR’s Latest Bulletin on Facility Access Controls Matters to You
Why OCR’s Latest Bulletin on Facility Access Controls Matters to You In the ever-evolving landscape of cybersecurity, the Office for Civil Rights (OCR) has issued an August…
Rob Van Buskirk2 min read
2.9 Billion , with a B, SSNs Compromised in Massive Data Breach—Here’s What You Should Do Next
In an unprecedented data breach, 2.9 billion of Social Security Numbers (SSNs) and other sensitive personal information have been compromised. This breach, one of the largest…
Rob Van Buskirk5 min read
Steps for a New Chiropractor to Achieve HIPAA Compliance
Starting a chiropractic practice is a rewarding endeavor that allows you to provide essential care to your patients. Ensuring that your practice is HIPAA compliant from the…
Rob Van Buskirk3 min read
Steps for a New DPC Doctor to Achieve HIPAA Compliance
Starting a Direct Primary Care (DPC) practice is an exciting venture that offers personalized and accessible healthcare. However, ensuring that your practice is HIPAA compliant…
Rob Van Buskirk3 min read
AT&T Data Breach and CrowdStrike Global Outage: Implications and Precautions for Your Business
In recent weeks, two significant events have shaken the cybersecurity landscape: the AT&T data breach and the global outage experienced by CrowdStrike. These incidents…
Rob Van Buskirk3 min read
Alright, Alright, Alright: The Texas Data Privacy and Security Act (TDPSA) – What It Means for Your Business and How to Comply
Our company is based right here in the state of Texas and as of 1, July 2024 we finally have a Data Privacy Law , the TDSPA. In this digital age, data breaches and privacy…
Rob Van Buskirk4 min readUnlocking Security: A Deep Dive into SOC 2 Compliance
In the latest episode of the VanRein Compliance Podcast, we had the privilege of diving deep into the world of SOC 2 compliance with Kate Williams, a distinguished expert in…
Rob Van Buskirk6 min read
Unlocking Success: The Crucial Role of Understanding Your Vendors
In the dynamic landscape of modern business, success hinges not only on internal strategies and operations but also on the strength of external partnerships. Among these…
Rob Van Buskirk2 min read
Emerging Threats in Cybersecurity: A February 2024 Overview
In the ever-evolving landscape of cybersecurity, it's crucial to stay one step ahead of emerging threats to safeguard sensitive information. As we delve into February 2024,…
Rob Van Buskirk2 min readDeep Dive into HIPAA Violations and Unauthorized Access in Healthcare: A Balancing Act of Entertainment and Education
On this week's VRC POD. Listen >>>.
Dawn Van Buskirk2 min read
A Step-by-Step Guide to Achieving and Maintaining HIPAA Compliance
In today's digital age, protecting patient information is of utmost importance. HIPAA, or the Health Insurance Portability and Accountability Act, sets forth regulations and…
Dawn Van Buskirk8 min read
Case Studies in HIPAA Compliance: Lessons Learned
In today's digital age, data privacy and security have become a top concern for organizations across various industries. One of the main regulations that organizations must…
Dawn Van Buskirk8 min read
Core Components of HIPAA Compliance
HIPAA, the Health Insurance Portability and Accountability Act, is a crucial piece of legislation that regulates the privacy and security of patients' health information.…
Dawn Van Buskirk9 min read
How to Implement an ISO27001 Compliant Information Security Management System
In today's digital age, ensuring the security of sensitive information has become paramount. Organizations must take proactive measures to protect their data from cyber…
Dawn Van Buskirk10 min read
ISO27001 Compliance: Practical Tips and Advice
In today's digital age, information security has become a critical concern for organizations of all sizes. The ISO27001 standard provides guidelines for establishing,…
Dawn Van Buskirk8 min read
Key Elements of ISO27001 Compliance
In today's digital world, data security has become of utmost importance. Organizations across various industries are continuously striving to protect their sensitive…
Dawn Van Buskirk10 min read
Leveraging SOC2 Compliance for Business Growth
In today's digital landscape, data security and privacy have become critical concerns for businesses of all sizes. Customers are more vigilant than ever when it comes to the…
Dawn Van Buskirk9 min read
Maintaining SOC2 Compliance: Best Practices
Maintaining SOC2 compliance is essential for businesses that handle sensitive customer data. SOC2 compliance demonstrates an organization's commitment to data security and…
Dawn Van Buskirk9 min read
Navigating the SOC2 Audit Process: A Comprehensive Guide
In today's digital age, data security and privacy have become paramount concerns for businesses of all sizes. More and more organizations are recognizing the importance of SOC2…
Dawn Van Buskirk9 min read
The Benefits of Achieving ISO27001 Certification
In today's increasingly digital world, information security is of paramount importance for organizations across all industries. One of the most effective ways to demonstrate a…
Dawn Van Buskirk8 min read
The Five Trust Service Criteria of SOC2
Explore the importance of SOC2 compliance in safeguarding sensitive data. Learn about the five trust service criteria.Explore the importance of SOC2 compliance in safeguarding…
Dawn Van Buskirk8 min read
The Potential Consequences of HIPAA Non-Compliance
The Health Insurance Portability and Accountability Act (HIPAA) was enacted in 1996 to protect the privacy and security of individuals' health information. Failure to comply…
Dawn Van Buskirk8 min read
What is ISO27001 and Why It Matters for Your Business
ISO27001 is an international standard for information security management systems (ISMS). It provides a framework for organizations to establish, implement, maintain, and…
Dawn Van Buskirk8 min read
What is SOC2 and Why It Matters for Your Business
In today's digital landscape, the security of sensitive data has become a paramount concern for businesses of all sizes. With the increasing number of cyber threats and data…
Dawn Van Buskirk9 min read
What is HIPAA and Why It Matters for Your Business
HIPAA, which stands for Health Insurance Portability and Accountability Act, is a legislation that was passed in 1996 to address the growing concerns about the security and…
Dawn Van Buskirk8 min read
VanRein Compliance and TrustCloud Join Forces to Enhance Compliance Solutions
VanRein Compliance is excited to announce its strategic partnership with TrustCloud, a renowned GRC platform that upgrades GRC into a profit center with programmatic evidence…
Dawn Van Buskirk2 min read
How Data Compliance Can Increase Your Revenue
In today's digital world, data drives most business decisions and interactions. As a result, ensuring that your organization is compliant with data regulations is crucial not…
Dawn Van Buskirk8 min read
Credit Card Companies Protect Your Data
We use our credit cards several times daily through numerous credit card processors. Did you know that major credit card companies (including Visa, Mastercard, American…
VanRein Compliance1 min read
What To Know About Texas HB300
Texas House Bill 300, also known as Texas HB300, went into effect on September 1, 2012. This bill significantly expands patient privacy protections for Texas-covered entities…
VanRein Compliance1 min read
What You Need To Know About HIPAA
HIPAA stands for Health Information Portability and Accountability Act of 1996. It is a federal law requiring national standards to protect sensitive patient health information…
VanRein Compliance1 min read
The Role of The Compliance Officer
Let’s talk about compliance risk management. Compliance risk management involves assessing the risks to your organization’s compliance with regulations and industry standards…
VanRein Compliance1 min read
New State Compliance Laws in 2023
In 2023 five states are implementing new laws to protect consumer data and privacy rights. Those states are California, Virginia, Colorado, Connecticut, and Utah. Don’t stop…
VanRein Compliance1 min read
Keeping Your Data Secure This Holiday Season
“It’s the most wonderful time of the year!” Unless someone steals your identity or you infect your computer at work or at home with a virus. ‘Tis the season for shopping!…
VanRein Compliance1 min read
3 Keys to Compliance Success
We always get asked, "What are the three keys to compliance success?" Compliance can be confusing and knowing where to start is not always clear. We recommend starting with a…
VanRein Compliance1 min read
Cybersecurity News & Resources 2.24.22
Happy Thursday! We're here bringing you your cybersecurity news and tips for the week.
Rob Van Buskirk1 min read
VanRein Compliance's One Year Anniversary
VanRein Compliance is 1 year old today, but Rob and I started this journey over 5 years ago! Some of you may remember us as Legacy Compliance, although most recently you will…
Dawn Van Buskirk1 min read
VanRein Helps Medical Cannabis Platform Veriheal Navigate a Young Industry
The importance of HIPAA compliance in traditional healthcare settings is nothing new, but where does HIPAA fit into alternative medicine? With natural and holistic health…
VanRein Compliance3 min read
VanRein Compliance Appoints Dawn Van Buskirk as New CEO
New Braunfels, TX, Release: March 17, 2021.
Rob Van Buskirk2 min read
The Importance of Disaster Recovery Plans
Hello from a thawed-out Texas! The past couple weeks of storms, power outages, boiling water, and more have been a strong reminder of the necessity of business continuity and…
VanRein Compliance2 min read
Trusted Compliance Company VanRein Compliance Announces Partnership with IT Leader RainTech
New Braunfels, TX– VanRein Compliance and RainTech announced their partnership today, bringing each company’s 20+ years of expertise in cybersecurity and compliance together to…
VanRein Compliance2 min read
12 CyberSecurity Strategies to Implement This Year
With headlines full of cyberattacks and security breaches victims, it is time to take the risks seriously!
VanRein Compliance3 min read
Your HIPAA Compliance Framework
Becoming compliant with state and federal guidelines means assessing your business' risks, having policies and procedures in place, and training your staff on those policies…
VanRein Compliance2 min read
Trusted Compliance Company ProHIPAA Announces Major Rebranding, Changing to VanRein Compliance
New Braunfels, TX, Release: October 21, 2020. For Immediate Release
VanRein Compliance2 min read
Telehealth and the COVID-19 Crisis
Until recently, telehealth has been slowly growing in healthcare, and with COVID-19 more and more providers are switching to it to see patients. Given the state of emergency…
VanRein Compliance3 min read
Protect Your Company's Data: Be Alert for These Five Fraud Trends
Staying updated on the latest attack types and prevention techniques is the only way to future-proof your organization.
VanRein Compliance3 min read
What is the California Consumer Privacy Act?
California is starting 2020 with a new privacy act! As we've mentioned in previous posts, many states are adding additional privacy regulations in response to major data…
VanRein Compliance1 min read
Employee Training Beyond HIPAA
Do your employees and/or co-workers have all the training to protect patient information and other data you handle? Do you have procedures to discover if there are any gaps in…
VanRein Compliance2 min read
Making Passwords Less Painful
Passwords! They’re needed everywhere and it can be hard to keep track of them. However, having good passwords (and password policies) in place is essential to data security and…
VanRein Compliance1 min read
Scary HIPAA Stories
At VanRein Compliance, we don’t like to scare people by focusing on stories of data breaches and things gone wrong… but when better to tell scary stories than around Halloween?…
VanRein Compliance3 min read
Risk Analysis: Mapping Your Data
Do you know where data goes when it enters your organization? Where is it stored? Who has access to it? Are there different levels of access with restrictions for some…
VanRein Compliance1 min read
Email Encryption and Maintaining HIPAA Compliance
We use email every day, and it’s easy to forget how vulnerable email actually can be. When you’re dealing with HIPAA and patient health information, you want to make sure that…
VanRein Compliance4 min read
Mobile Phone Encryption and HIPAA Compliance
Are you taking appropriate steps to protect your data as well as your customers’ data?
VanRein Compliance1 min read
Why Do I Need Policies and Procedures for HIPAA Compliance?
Often when companies complete their Risk Assessment, they gaps in how they are operating which leaves PHI vulnerable. There aren't policies and procedures in place to guide…
VanRein Compliance2 min read
What is a HIPAA Risk Assessment?
Health records are worth hundreds or even thousands on the black market. Do you have policies and security in place to protect your customers’ information? Are you sure? What…
VanRein Compliance2 min read
Is HIPAA Training All That's Needed?
When thinking about HIPAA compliance, training is usually what immediately comes to mind. And once you’ve trained, or your employees have trained, you’re done right? The short…
VanRein Compliance2 min read
What is HIPAA and Why is it Important?
Whether you work in a doctor’s office, with a health plan, an answering service that handles doctors’ calls, or an IT company which stores patient information, HIPAA applies to…
VanRein Compliance2 min read
What is the HITECH Act and Does It Impact You?
HITECH stands for Health Information Technology for Economic and Clinical Health. It aims to improve health care quality, safety, and efficiency with health information technology.
VanRein Compliance3 min read
What is a Business Associate?
Learn today if you are a Business Associate and the steps you need to take to be compliant.
Rob Van Buskirk1 min read
Small Practice? Get Your Race Car!
The Office for Civil Rights is increasing investigations into HIPAA breaches that affect fewer than 500 people. Small practices need a security plan ready.
Rob Van Buskirk1 min read
Duck, Duck, Breach!
As I scan through the emails and tweets about another healthcare facility being hit by the Locky Ransomware email, or thousands of records being stolen from many healthcare…
Rob Van Buskirk2 min read
5.55 Million Dollar Fine! (Got Your Attention?)
WOW! Can you believe the latest fine from the OCR? $5.55 Million! This week, Advocate Health Care agreed to settle their HIPAA penalties with the OCR. More fines like this one…
Rob Van Buskirk2 min read
Attention Dentists: Don’t Get Drilled by a HIPAA Audit!
With Phase 2 of HIPAA Audits underway, dentists need to be more vigilant than ever about their HIPAA audit preparedness. There is no practice too big or too small to fly under…
Rob Van Buskirk2 min read
Did You Receive an Audit Letter From the OCR?
The Office of Civil Rights (OCR) gets busy every year sending letters out to covered entities. A total of 167 letters were recently emailed notifying the recipients they are…
Rob Van Buskirk1 min read
MD Anderson Fined and PHI Uses for Research
It has been a busy couple weeks for the Office of Civil Rights! They are stepping up their enforcement, jailing thieves, and adding new policies. Let’s break down the results…
Rob Van Buskirk1 min read
Are My Employees a HIPAA Risk to My Practice?
Here’s the headline:
Rob Van Buskirk1 min read
Everyone Loves Gmail, but is it HIPAA Compliant?
As I talk to medical professionals, the question of Gmail and its compliance comes up. We all like Gmail because it just works and is easy to use. I personally use it outside…
Rob Van Buskirk2 min read
Quest Diagnostics Breached, 34,000 Records Stolen
At some point in your life, there is a very good chance that you have had blood drawn and sent to Quest Diagnostics. Quest just notified the Media that they had over 34,000…
Rob Van Buskirk2 min read
I Overheard My Doctor Say What?
Let’s talk about HIPAA and oral conversations. Did you know that your oral conversations with a coworker, doctor, or patient are covered by the HIPAA Privacy Rule? Yes, that…
Rob Van Buskirk1 min read
No HTTPS = No Google Customers
In today’s interconnected world, Google has made a change for good. Actually, they made the change back in January 2017, but there are still plenty of non-secure websites…
Rob Van Buskirk1 min read
Should My IT Vendor or Cloud EHR Sign My BAA?
Yes, Yes, and more YES. Business Associate Agreements are critical to protecting you and your legacy as a covered entity. Period. And they are the law.
Rob Van Buskirk1 min read
Why Do Hackers Want to Steal PHI?
Your business is important to you, your patients, and your employees. Not only are HIPAA compliance and data security a legal requirement, they are also the right way to handle…
Rob Van Buskirk1 min read
Take 30 Minutes to Protect Your Legacy from Ransomware
This month, we witnessed the largest ransomware attack in history. This has left many of our customers wondering what they can do to protect their business. We take it a step…
Rob Van Buskirk1 min read
Does Your IT Vendor Even Care?
The simple answer is “no.” Until your IT Vendor becomes an IT Partner, the safety and security of your IT systems will never be their primary concern.
Rob Van Buskirk2 min readAvast CCleaner Malware Infects 2.27M Users. What To Do…
New week, new ransomware attack. This time, the ransomware is embedded in a program that was designed to protect you. Avast CCleaner has been internally infected by hackers.…
Rob Van Buskirk1 min read
Data Is Now Worth More Than Oil
Today, we attended the NIST/HHS/OCR HIPAA CyberSecurity Conference. I have personally wondered when this day would come. Liliana Peters (Senior Advisor, Compliance and…
Rob Van Buskirk1 min read
Equifax Breach Exposes 143 Million People and Businesses to Identity Theft
Cybersecurity is an important part of the service we provide to our customers. It is important to be aware of how this data breach could impact you and your business.
Rob Van Buskirk1 min read
The Best Firewall is YOU!
As we see more and more breaches, we think about firewalls and technology to save us and our business. The US government introduced the Medical Device Cybersecurity Act of 2017.
Rob Van Buskirk1 min read
The Scary Truth About Your Role in the Opioid Crisis
Happy Halloween! In this week’s edition of HIPAA News…
Rob Van Buskirk2 min read
You Should Update Your Apple Devices Immediately to Fix a Major Security Flaw
The days of Apple devices being immune to security threats have been over for quite some time. This goes for Android as well.
Rob Van Buskirk1 min read
Colorado Considers New Privacy and Data Breach Legislation
As a compliance company with offices in Colorado, we are always on the lookout for changes to laws and fines that can impact our customers. Well, it’s our turn as the HIPAA…
Rob Van Buskirk1 min read
Ready to take the next step?
Let's start with a conversation. We'll look at where you stand and what it would take to get there.