The Healthcare Compliance Step-By-Step Podcast

HIPAA Security and HR: Managing Workforce Risk Before It Becomes a Breach highlights why HIPAA Security is not just an IT issue and why Human Resources plays an important role in protecting electronic protected health information. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how HR decisions can affect HIPAA Security compliance, including hiring, on...

OSHA 2026: Connecting SDS Requirements to SOPs and Daily Compliance highlights why Safety Data Sheets are more than a binder requirement and why healthcare organizations must connect chemical safety information to real workplace procedures, employee training, and daily compliance practices. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how SDS requir...

HIPAA 2026: Small Business Adjustments Healthcare Practices Need to Make Now highlights why small healthcare organizations should prepare for anticipated changes to the HIPAA Security Rule and stronger cybersecurity expectations. The session focuses on practical safeguards such as asset inventories, ePHI data mapping, multifactor authentication, encryption, vulnerability management, contingency pl...

Microsoft’s 2026 Phishing Warning: Why Healthcare Organizations Remain a Prime Target highlights why healthcare continues to be one of the most targeted industries for cyberattacks and why phishing remains a major threat to patient data, systems, and organizational security. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss Microsoft's 2026 phishing...

HIPAA or FERPA? Understanding Which Privacy Rule Applies highlights the important differences between two major privacy laws and why organizations must understand which rule applies before handling student, medical, counseling, athletic, or academic records. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how HIPAA and FERPA apply in different settings...

Compliance, Cybersecurity, AI, Medicare Scrutiny, and the Operational Pressures Facing Medical Practices in 2026 highlights the growing compliance, cybersecurity, AI, Medicare, documentation, training, and operational risks facing medical practices as healthcare organizations prepare for a more demanding regulatory environment. In this session, Dr. Jose Delgado, CEO of Taino Consultants and EPICom...

Hospice, Home Health, and Medicare Fraud: Why CMS Is Taking Action highlights the growing compliance, billing, enrollment, and audit risks facing hospice and home health organizations as CMS increases scrutiny across these sectors. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss CMS's recent six-month nationwide freeze on new Medicare enrollments f...

No Surprises, Big Disputes: Lessons from the Aetna and Radiology Partners Case highlights the operational, billing, and compliance challenges healthcare organizations may face when payer reimbursement disputes escalate under the No Surprises Act. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss the recent Aetna and Radiology Partners dispute as a real-w...

A Breach Is More Than an IT Problem: HIPAA, Ransomware, and Patient Trust highlights the serious compliance and operational risks healthcare organizations face when a ransomware attack exposes patient information or disrupts patient care. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss the recent Hospital Caribbean Medical Center data breach as a real-...

Offshoring Healthcare Data: HIPAA Risks, Vendor Liability, and the Mirra Health Case highlights the growing compliance risks healthcare organizations face when protected health information, claims data, or regulated functions are handled by oversea vendors. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss the difference between using domestic resources,...

Can you Bill for a No-Show? Missed Appointment Fees and Insurance Billing Risks highlights a common but often misunderstood issue in healthcare operations: the difference between charging a patient a missed appointment fee and billing insurance for a service that was never provided. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how no-show policies c...

Healthcare Realities: Challenges and a Plan of Action is a reminder that success in today's healthcare environment is not only about delivering quality care; it is about building practical systems that help organizations survive increasing operational, financial, and compliance pressure. As insurance rules become more complex, patient costs rise, legislative relief remains limited, and HIPAA expec...

Attractive Marketing vs. Insurance Rules: Where Healthcare Promotion Can Cross the Line highlights a serious challenge that continues to affect healthcare organizations today: the risk that marketing language. promotional claims, and service descriptions may go beyond what payer rules, documentation standards, and compliance expectations allow. In this session, Ray Walters (EPICompliance) and Mr....

How One Wrong Click Cost a Healthcare Provider $150,000 - And How You Can Avoid the Same highlights a serious challenge that continues to affect healthcare organizations today: cyber-related mistakes that can lead to major financial losses, operational disruption, compliance exposure, and increased risk to patient health information (PHI). In this session, Ray Walters (EPICompliance) and Mr. Jose...

When Care Crosses the Line: Nursing Fraud Cases, Red Flags, and Real-World Lessons highlights a serious challenge that continues to affect healthcare organizations today: misconduct that can place patients at risk, undermine trust, and expose providers and organizations to significant compliance, operational, and legal consequences. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado...

What the Show "Scrubs" Got Right: Prior Auths and Delays in Modern Healthcare highlights a frustration that remains very real in healthcare today: too much time spent navigating administrative barriers rather than focusing on patient care. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how prior authorizations, delays, and paperwork continue...

Payer Contracts in 2026: Negotiate Smarter, Reduce Denials, Protect Revenue is a reminder that payer contracting is not just a financial issue, but also a compliance and operational priority. Healthcare organizations need a clear process for reviewing contract terms, identifying risk, and preparing staff to manage denials, prior authorization requirements, and reimbursement challenges more effecti...

Healthcare Compliance Essentials: Responding to Federal Law Enforcement the Right Way is a reminder that responding to federal law enforcement is not only a legal matter, but also a healthcare compliance responsibility. Organizations need clear workflows, trained staff, and strong documentation to verify requests, manage disclosures appropriately, avoid preventable mistakes, and document each step...

HIPAA 2026: The Practical Roadmap for Compliance Leaders is a reminder that compliance success in 2026 is not about knowing the rules; it is about building repeatable workflows that teams can execute consistently. As expectations continue to shift and operational pressure increases, gaps in training, documentation, incident response, vendor oversight, and AI use can quickly become preventable expo...

HIPAA 2026: Required Actions, Proposed Shifts, and Risk Priorities is a reminder that 2026 compliance is not just a policy update; it becomes operational risk fast when requirements aren't translated into clear workflows. As privacy expectations shift, security standards tighten, and AI-driven claim reviews increase, weak documentation and inconsistent oversight create preventable exposure. In thi...

Romance in the Workplace: Compliance, Boundaries, and Risk Management is a reminder that workplace conduct is not just an HR issue; it is one of the fastest ways for compliance risk to escalate when boundaries are unclear. When relationships cross reporting lines, involve power dynamics, or spill into work channels, organizations can face preventable exposure. In this session, we use workplace-rel...

The Rookie S4E17 "Coding: HIPAA, Security, and Patient Safety in a Crisis is a reminder that emergency response is not just a clinical function; it is one of the fastest moments for compliance risk to escalate if teams are not prepared. When a facility becomes unstable, and information is moving quickly, unclear disclosure rules, weak access control, and poor documentation can create preventa...

Smart Start in Healthcare: HR Onboarding + Compliance Essentials is a reminder that onboarding is not just an HR function; it is one of the fastest ways to reduce compliance risk before it turns into an incident. When new hires are onboarded without clear access controls, required training, and documentation, organizations face preventable exposure. The question auditors and leadership ask later i...

Ghost networks are a sharp reminder of how quickly patient access can break down when directories are outdated, ownership is unclear, and "someone else is updating it" becomes the default assumption. When patients cannot find care and complaints start rolling in, the core question becomes simple and urgent: "Prove what you verified, what you updated, and when." Providers, MSOs,...

Minnesota's recent fraud investigations are a sharp reminder of how quickly Medicaid-funded services can be abused when enrollment is easy, documentation is weak, and ongoing monitoring doesn't keep up. When investigators start asking on core question - "Prove the service actually delivered" - providers need more than good intentions. They need controls and an evidence trail that...