Intelligence · Compliance News
The news arrives where the work is. Not in a newsletter you meant to read.
A modest thing done properly: enforcement and breach news on the same screen as your compliance queue, refreshed daily, with an office setting for what the feed carries.
HIPAA mapping
Where this fits in the HIPAA rules.
2 provisions this capability contributes to, each with the specific Compliance News behavior behind it. The obligation stays with your practice — the mapping shows which part of the work the platform carries.
§164.404Notification to individuals
Specifies notification requirements following breaches. The news feed surfaces breach patterns useful for understanding notification practices in your sector.
§164.408Notification to the Secretary
Specifies reporting obligations to HHS. The OCR breach disclosure data is the public output of these reports; the feed surfaces the relevant disclosures for your context.
What it does
Filtered intelligence. No noise.
Independent practices can't keep up with HIPAA enforcement and breach activity by reading every health-IT publication. The volume is too high; the relevance is too uneven. Most practices end up either over-subscribed (signal lost in noise) or under-subscribed (missing patterns that affect their sector). Neither produces actionable intelligence.
Compliance News is the alternative. The platform ingests HHS OCR breach data daily, layers in enforcement actions and regulatory updates, and filters to what's relevant for your practice — your sector, your size, your operational context. The result is a focused intelligence feed: what's happening in HIPAA enforcement that you should know about, and only that.
Some items are informational (“here's what happened”); some trigger Compliance Advice items (“review your training given this enforcement pattern”); some inform Risk Intelligence (“vendor X had a public incident, your BAA relationship may warrant review”).
How it works
7 mechanisms keep Compliance News working.
Daily OCR data ingestion.
The HHS Office for Civil Rights publishes breach disclosure data publicly. The platform ingests this data daily via the public APIs and feeds. New disclosures appear in the news feed within 24 hours of HHS publication.
Enforcement, as it publishes.
Settlements and corrective action plans as they are announced.
The office manages its own feed.
An Administration screen governs what the feed carries, so the news a practice sees is a setting rather than a fixed broadcast. What that screen exposes today is worth asking us about directly rather than reading here — this page is deliberately not going to describe filtering behavior it cannot show you.
News beside the queue, not in an inbox.
The feed lives in the platform, on the same screen set as the Compliance Advice you are already working through. That placement is the mechanism. Enforcement news delivered by newsletter competes with everything else in a practice manager's morning; enforcement news sitting next to the queue is read by the person who can act on it.
A news surface, and only that.
This is not the threat-intelligence system and the two should not be collapsed. The sector-wide picture — breach filings, enforcement actions, advisories, maps and trends — is a different capability with different mechanics, and it has a public home at the Breach Dashboard. What this does is put the reading material where the work is.
Public sources only.
Nothing in the feed comes from another practice's private data.
A news surface.
Not the threat-intelligence system, which is a different capability.
Who this is for
Built for the practices that need it most.
Practices that want signal without subscribing to publications.
Health-IT publications, compliance newsletters, vendor blog feeds — all carry HIPAA news, all carry mostly-irrelevant HIPAA news for any specific independent practice. The filtered feed is the alternative.
Practices in sector-specific threat contexts.
Behavioral health attacks differ from optometry attacks differ from primary care attacks. Sector-relevant news produces intelligence that generic feeds dilute.
Practices with vendor concentration.
When a major vendor experiences an incident, every connected practice is affected. The feed surfaces vendor-specific events that warrant review of your own vendor relationships.
Practices with reporting or board responsibilities.
The feed's trend analytics produce useful inputs for board reporting — sector breach trends, enforcement patterns, relevant comparison points.
What you get
6 outcomes you’ll feel in week one.
Where the work is.
On the same screens as your compliance queue.
Daily OCR data.
Public breach disclosures ingested within 24 hours of HHS publication.
Enforcement action tracking.
Settlement and CMP patterns observable as they emerge.
Managed by the office.
An Administration screen governs what the feed carries.
Community signal aggregation.
Network-effect intelligence from connected practices.
Trend analytics.
Sector and pattern visualization for board and program reporting.
Can the office control what the feed carries?
How current is it?
What about non-public information?
How is this different from the Breach Dashboard?
Does the feed replace my legal counsel?
Which plan includes it?
What it does not do.
- A news surface, not the threat-intelligence system — different mechanisms, and collapsing them would misdescribe both
- Basic. There is no Pro tier of the feed, whatever an earlier page said.
Continue exploring
Related features in the platform.
Intelligence layer
HIPAA Breach Cost Calculator
Free, no account: what a breach of a given size would plausibly cost, with its limits stated.
Learn moreDefense
Breach SimulatorIn development
The idea: take a scenario that has actually happened to practices like yours, and walk it against what your office has recorded — not to produce a score, but to find the step where it would get through.
Learn moreOperations
HIPAA Foundations Training
HIPAA training inside the platform, with every completion recorded as it happens. The first documentation an auditor asks for, produced by doing the training rather than assembled afterwards.
Learn moreHIPAA news that's relevant. Filtered daily. Without the noise.
Most practices configure their sector and size in minutes. The feed starts surfacing relevance the same night.