Original research from Patient Protect's Secure Care Research Institute and curated analysis of the academic and policy literature shaping HIPAA practice.
3 articles
Research & Analysis is where Patient Protect publishes original work — peer-reviewed papers, white papers, sector studies — and analyzes notable academic, regulatory, and industry research from elsewhere. The Secure Care Research Institute is Patient Protect's research arm; its papers appear on SSRN and are cross-referenced here with practitioner-facing summaries. Articles in this category are slower-moving than news coverage but carry more analytical depth.
The Q2 2026 State of Compliance publishes as a verified brief rather than a full quarter compilation. Even in the smaller verified set, one finding is unambiguous: 51.7% of the verified impact came from a single AI vendor. The upstream-aggregation pattern the Q1 issue identified is not going away — it's migrating.
Today we publish the inaugural Q1 2026 State of Compliance — drawn from seven authoritative sources after the OCR portal alone showed almost no March activity. The headline finding is concentration: four upstream vendor breaches drove 67.6% of all Q1 patient impact.
Corrective Action Plans are not just penalties. They are a public record of what goes wrong when practices skip the basics. The patterns are consistent and preventable.
Related references
