Safeguard
Tag

hipaa

Safeguard articles tagged "hipaa" — guides, analysis, and best practices for software supply chain and application security.

33 articles

Compliance

HIPAA Meaning: What the Law Requires and Why It Matters for Software

HIPAA meaning explained: it is the U.S. Health Insurance Portability and Accountability Act, which sets rules for protecting patient health data. Here is what it covers and how it hits software teams.

May 11, 20266 min read
Compliance

Does AI pentesting satisfy SOC 2, ISO 27001, HIPAA or PCI...

AI-powered pentesting promises fast compliance checkmarks, but SOC 2, ISO 27001, HIPAA, and PCI DSS 4.0 auditors require more than an automated scan report.

May 4, 20267 min read
Regulation

HIPAA Security Rule NPRM: Encryption, MFA, and the End of 'Addressable'

OCR's December 27, 2024 NPRM removes the addressable/required distinction and mandates encryption, MFA, semi-annual vulnerability scans, and annual penetration tests for ePHI.

Mar 30, 20266 min read
Incident Analysis

UnitedHealth Change Healthcare: 190 Million Update and the Long Tail

In January 2025 UnitedHealth revised the Change Healthcare breach count to 190 million people, the largest HIPAA breach in US history. We unpack what changed and the supply-chain lessons that still apply.

Mar 23, 20267 min read
Regulatory Compliance

Digital Health HIPAA Supply Chain Intersection

Digital health startups collide with HIPAA obligations as soon as they touch clinical data. A regulatory map of the supply chain choke points.

Mar 18, 20267 min read
Regulatory Compliance

HIPAA vs SOC 2: do you need both?

SOC 2 and HIPAA solve different problems. Here's what compliance automation platforms like Drata cover, where the software supply chain evidence gap remains, and how to close it.

Mar 18, 20269 min read
Best Practices

EHR System Dependency Governance

Electronic Health Record platforms carry decades of transitive dependencies. A practical governance model for hospitals, vendors, and compliance officers.

Mar 14, 20266 min read
Regulatory Compliance

HIPAA vs GDPR key differences

HIPAA and GDPR differ in scope, breach timelines, and enforcement. We break down both laws and where compliance automation and supply chain security tools each fit.

Mar 10, 20268 min read
Threat Intelligence

INC Ransom: Inside the Group Targeting Healthcare Infrastructure

INC Ransom has made healthcare a primary target, exploiting the sector's unique vulnerabilities and urgency. A deep dive into their operations and what healthcare security teams should prioritize.

Mar 9, 20266 min read
Compliance

Software Supply Chain Security for Healthcare (HIPAA) 2026

Software supply chain security for healthcare in 2026 means the new HIPAA Security Rule, 405(d) practices, and FDA postmarket expectations converging on SBOM.

Mar 9, 20267 min read
Regulatory Compliance

Telemedicine Supply Chain Privacy and Security

Telehealth platforms depend on video SDKs, third-party transcription, and mobile frameworks. A regulatory walkthrough for HIPAA-covered virtual care.

Mar 7, 20267 min read
Regulatory Compliance

HIPAA and the Software Supply Chain in 2026

The HIPAA Security Rule has not changed, but OCR enforcement and the 2024 NPRM are reshaping what supply chain controls covered entities and business associates must demonstrate.

Mar 3, 20265 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

hipaa (Page 2) — Safeguard Blog