HIPAA Insider

HIPAA Insider

Join us for informative and entertaining discussions about how to make your business or practice more secure with HIPAA compliance. We'll cover topics like healthcare IT, HIPAA cloud hosting, telemedicine and healthcare applications, cybersecurity risk, PHI. WordPress etc., Sponsored by HIPAA Vault: https://www.hipaavault.com/

  1. 3d ago

    The AI Sandbox Trap: Is Your Vibe-Coded Health App Breaking HIPAA?

    Is your vibe-coded healthcare app actually ready to handle PHI? This week on the HIPAA Insider Show, we dive into the “AI Sandbox Trap”—a growing challenge for digital health founders and developers using AI-powered tools to build healthcare applications faster than ever. Vibe coding can take an idea from concept to working prototype incredibly quickly. But a functioning app isn't automatically a HIPAA-compliant app. In this episode, we explore what can happen when AI-generated healthcare applications move from experimentation into production, including: Where default configurations can expose Protected Health Information (PHI)The hidden compliance risks of AI-generated code and workflowsWalled-garden platforms vs. portable development environmentsWhy Business Associate Agreements (BAAs) matter when vendors handle PHIHow third-party integrations can introduce unexpected data flowsWhat founders and developers should evaluate before using real patient dataHow to think about moving an AI-built prototype into a secure production environmentWe also discuss tools and development approaches such as Bubble and Cursor, and why understanding where your code, infrastructure, and patient data live becomes critical when building for healthcare. The takeaway: Working code ≠ HIPAA-compliant code. If you're a digital health founder, developer, CTO, healthcare IT professional, or compliance leader experimenting with AI development and vibe coding, this episode is for you. Learn more about HIPAA Vault Interested in joining the HIPAA Insider Show as a guest?

  2. Aug 19

    HIPAA Rule Delayed – What Now for Your Practice?

    The HIPAA Security Rule overhaul has been delayed. So what should healthcare organizations do now? In this episode of the HIPAA Insider Show, Adam Z. and HIPAA Vault CEO Gil Vidals unpack the latest developments surrounding the proposed HIPAA Security Rule update and what the longer regulatory timeline means for healthcare providers, covered entities, and business associates. While the anticipated cybersecurity overhaul has been pushed back, that doesn't mean organizations should put security improvements on hold. The current HIPAA Security Rule remains enforceable, cyber threats continue to evolve, and the additional time creates an opportunity to prepare without a last-minute compliance scramble. In this episode, we discuss: Why a regulatory delay doesn't mean cybersecurity can waitThe importance of multi-factor authentication (MFA)Why encryption should remain a priorityVulnerability scanning and penetration testingThe challenges facing smaller and rural healthcare providersHow organizations can identify security and compliance gaps nowHow to turn the extended timeline into a strategic advantage The takeaway: The rule may be delayed, but cyber threats aren't. Use the extra runway to strengthen your security posture, address vulnerabilities, and prepare your organization for whatever comes next. Learn more about HIPAA VaultInterested in becoming a guest on the HIPAA Insider Show?

  3. May 20

    HIPAA Rules Just Changed: Security Is No Longer Optional

    The 2026 HIPAA Rule Updates: From “Addressable” to Required HIPAA compliance is entering a new phase—and “optional” security measures are quickly disappearing. In this episode of the HIPAA Insider Show, Adam Z. and cloud security expert Gil Vidals break down the major HIPAA Security Rule updates shaping healthcare compliance in 2026. As regulators push key safeguards from “addressable” to REQUIRED, healthcare organizations of all sizes must rethink how they approach security, infrastructure, and risk management. We discuss: What HIPAA changes are already activeWhich requirements are still pendingNew mandatory encryption expectationsThe proposed 12-month penetration testing requirementsWhy MFA and stronger safeguards are becoming essentialHow smaller healthcare organizations can stay compliant without enterprise-level budgetsThis episode provides a practical look at how providers, MSPs, and health-tech teams can prepare for the next era of healthcare cybersecurity and compliance. Learn more about HIPAA Vault:https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show:https://www.hipaavault.com/podcast-guest/

  4. May 6

    When Trust Is the Vulnerability: The UK Biobank Data Scandal

    In this episode of the HIPAA Insider Show, Adam Z. breaks down the alarming UK Biobank scandal involving reports of 500,000 health records listed for sale on Alibaba and what it reveals about the future of healthcare security. We discuss: How “authorized” users became the vulnerabilityWhy “de-identified” data may not truly be anonymousThe growing risks of healthcare data sharingInsider threats and failures in data governanceWhat U.S. healthcare organizations can learn from this casePractical mitigation strategies to reduce HIPAA riskAs healthcare organizations continue expanding AI, analytics, and third-party integrations, insider threats are becoming one of the most important cybersecurity challenges to address. If you work in healthcare IT, compliance, cybersecurity, or digital health, this episode provides critical insights into protecting patient trust and securing sensitive data. Learn more about HIPAA Vault:https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show:https://www.hipaavault.com/podcast-guest/

  5. Apr 29

    AI Coding Trap: Hidden HIPAA Costs

    Building a healthcare app with AI has never been easier—but it may be setting you up for costly problems down the road. In this episode of the HIPAA Insider Show, we dive into the risks of “vibe coding” using platforms like Bubble, Glide, and Base44, and how these tools can lock you into “walled garden” environments that limit scalability, security, and compliance. We break down: What the AI coding trap really isHow “walled garden” platforms create hidden technical debtWhy many apps hit a HIPAA compliance wall before launchThe importance of code portability for long-term successWhat it means to be VPC-readyHow to avoid expensive rebuilds before handling patient dataIf you're a founder, developer, or healthcare operator building with AI tools, this episode provides a practical roadmap to avoid hidden costs and stay compliant from day one. Learn more about HIPAA Vault:https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show:https://www.hipaavault.com/podcast-guest/

  6. Apr 22

    The 2026 Compliance Overhaul: Audit-Proofing Your AI and Infrastructure

    HIPAA compliance is entering a new era—and 2026 will mark a major turning point. In this episode of the HIPAA Insider Show, Adam Z. and HIPAA Vault CEO Gil Vidals break down the upcoming modernization of the HIPAA Security Rule and the growing wave of AI disclosure regulations impacting healthcare organizations. As key safeguards shift from “addressable” to required, and states introduce stricter rules around AI transparency, providers, IT teams, and health-tech companies must rethink how they approach compliance. We cover: What the 2026 HIPAA updates mean in practiceThe shift from recommended to mandatory security controlsWhy multi-factor authentication (MFA) is no longer optional“Break Glass” protocols for AI systems and emergency accessNew expectations around AI transparency and accountabilityHow to prepare for audits without enterprise-level budgetsIf you're handling patient data or deploying AI in healthcare, this episode provides a clear, practical roadmap to stay compliant and reduce risk in the evolving regulatory landscape. Download the HIPAA Compliance Checklist:https://www.hipaavault.com/are-you-hipaa-compliant/ Learn more about HIPAA Vault:https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show:https://www.hipaavault.com/podcast-guest/

  7. Apr 15

    HIPAA Basics for 2026 Secure Your Practice

    HIPAA compliance doesn’t have to be complex—or expensive. In this episode of the HIPAA Insider Show, Adam Z. and HIPAA Vault CEO Gil Vidals go back to fundamentals, breaking down the essential tools healthcare practitioners need in 2026 to stay secure and compliant without overspending. Whether you're a solo provider, private practice, or growing clinic, this episode provides a practical roadmap to modernize your operations safely. We cover: The core tools every practice needs for HIPAA complianceSecuring email and document collaboration with platforms like Google WorkspaceProtecting your website with HIPAA-compliant hostingWhen to implement advanced solutions like patient intake formsUsing HIPAA SFTP for secure, large data transfersIf you’re looking to simplify compliance while leveraging modern technology, this episode shows how to build a secure, cost-effective foundation for your practice. Learn more about HIPAA Vault:https://www.hipaavault.com/ Become a guest on the HIPAA Insider Show:https://www.hipaavault.com/podcast-guest/

  8. Apr 3

    Launching Your Vibe-Coded App: The HIPAA Vault Framework

    You’ve built your healthcare app with AI. The MVP works. The “vibe” is right. But now comes the critical step: making it secure and HIPAA-compliant for real patient data. In this episode of the HIPAA Insider Show, Adam Z. and HIPAA Vault CEO Gil Vidals move beyond theory and into execution—breaking down the exact framework used to transform AI-built applications into production-ready, compliant systems. After exploring data strategy, synthetic data, and security gaps in previous episodes, this conversation focuses on what founders actually need to do next. We cover: How to migrate AI-built apps into secure, compliant environmentsIdentifying and fixing hidden security vulnerabilitiesValidating infrastructure for HIPAA requirementsPreparing applications to safely handle Protected Health Information (PHI)Launching without building a full DevOps or security teamIf you’ve built an app using tools like Replit, Cursor, or v0, this episode provides a practical roadmap to go from prototype to secure production. 🔐 Learn more about HIPAA Vault:https://www.hipaavault.com/ 🎙 Become a guest on the HIPAA Insider Show:https://www.hipaavault.com/podcast-guest/

See All (117)

About

Join us for informative and entertaining discussions about how to make your business or practice more secure with HIPAA compliance. We'll cover topics like healthcare IT, HIPAA cloud hosting, telemedicine and healthcare applications, cybersecurity risk, PHI. WordPress etc., Sponsored by HIPAA Vault: https://www.hipaavault.com/

Information

  • Creator
    HIPAA Insider
  • Years Active
    2022 - 2026
  • Episodes
    117
  • Rating
    Clean
  • Copyright
    © HIPAA Insider
  • Show Website
    HIPAA Insider

You Might Also Like