#138 - Microsoft’s 2026 Phishing Warning: Why Healthcare Organizations Remain a Prime Target

#142 - 2026 Insurance Upheaval: What Healthcare Practices Need to Watch as ACA Markets Shift

2026 Insurance Upheaval: What Healthcare Practices Need to Watch as ACA Markets Shift examines the changing Affordable Care Act insurance marketplace and what growing uncertainty may mean for healthcare organizations, patients, and providers. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss Cigna's announcement that it will leave the Affordable Care Act marketplace after the 2026 plan year, affecting approximately 369,000 members across 11 states. They also explore why major insurance carriers are reconsidering ACA participation and how rising premiums, changing subsidies, narrower plan options, and insurer exits may affect healthcare practices. Key Topics: * Why healthcare practices should pay attention to changes in the ACA marketplace. * How insurance carrier exits may affect patient access, coverage, and continuity of care. * The importance of monitoring coverage changes and documenting patient communications. Resources: * Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ [https://epicompliance.com/] * Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ [https://epicompliance.com/training-information-webinars] Originally Recorded: July 14, 2026.

#141 - HIPAA Security and HR: Managing Workforce Risk Before It Becomes a Breach

HIPAA Security and HR: Managing Workforce Risk Before It Becomes a Breach highlights why HIPAA Security is not just an IT issue and why Human Resources plays an important role in protecting electronic protected health information. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how HR decisions can affect HIPAA Security compliance, including hiring, onboarding, role changes, training, discipline, terminations, access management, and workforce clearance. Key Topics: * Why HR plays a major role in HIPAA Security compliance. * How workforce changes can create privacy and security risks. * Why the HIPAA Security Officer and HR must work together on access, training, sanctions, and documentation. Resources: * Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ [https://epicompliance.com/] * Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ [https://epicompliance.com/training-information-webinars] Originally Recorded: July 7, 2026.

#140 - OSHA 2026: Connecting SDS Requirements to SOPs and Daily Compliance

OSHA 2026: Connecting SDS Requirements to SOPs and Daily Compliance highlights why Safety Data Sheets are more than a binder requirement and why healthcare organizations must connect chemical safety information to real workplace procedures, employee training, and daily compliance practices. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss how SDS requirements support OSHA's Hazard Communication expectations and how healthcare organizations can use SDS records to identify chemical hazards, train employees, follow manufacturer instructions, store products properly, label containers, and respond to exposure or spills. Key Topics: * Why Safety Data Sheets must be part of daily operations, not just stored in a binder. * How SDS requirements connect to SOPs, training, labeling, storage, and exposure response. * How to keep SDS records accessible and ensure staff know how to use them. Resources: * Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ [https://epicompliance.com/] * Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ [https://epicompliance.com/training-information-webinars] Originally Recorded: June 30, 2026.

#139 - HIPAA 2026: Small Business Adjustments Healthcare Practices Need to Make Now

HIPAA 2026: Small Business Adjustments Healthcare Practices Need to Make Now highlights why small healthcare organizations should prepare for anticipated changes to the HIPAA Security Rule and stronger cybersecurity expectations. The session focuses on practical safeguards such as asset inventories, ePHI data mapping, multifactor authentication, encryption, vulnerability management, contingency planning, access control, and vendor oversight. In this session, Jose Delgado (Taino Consultants) sits down with Mr. Jose Carbia, owner and president of TeamLogic IT, to discuss what small healthcare businesses should be doing now for HIPAA 2026. The conversation translates technical and regulatory expectations into practical steps that owners, administrators, compliance officers, office managers, and healthcare leaders can understand and begin implementing. Key Topics: * Why small healthcare organizations should begin preparing for HIPAA 2026 now. * How expected HIPAA Security Rule updates may affect daily operations. * Why asset inventories, ePHI data mapping, MFA, encryption, and access controls matter. Resources: * Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ [https://epicompliance.com/] * Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ [https://epicompliance.com/training-information-webinars] Originally Recorded: June 23, 2026.

#138 - Microsoft’s 2026 Phishing Warning: Why Healthcare Organizations Remain a Prime Target

Microsoft’s 2026 Phishing Warning: Why Healthcare Organizations Remain a Prime Target highlights why healthcare continues to be one of the most targeted industries for cyberattacks and why phishing remains a major threat to patient data, systems, and organizational security. In this session, Ray Walters (EPICompliance) and Mr. Jose Delgado (Taino Consultants) discuss Microsoft's 2026 phishing warning, the campaign that reached more than 35,000 users across 13,000 organizations, and why healthcare organizations must stay alert to modern phishing tactics, credential theft, and token compromise. Key Topics: * Why healthcare remains a prime target for phishing attacks. * How modern phishing has evolved beyond simple fake emails. * How adversary-in-the-middle attacks can bypass traditional multifactor authentication. Resources: * Learn more about healthcare compliance systems: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ [https://epicompliance.com/] * Explore healthcare compliance training and weekly webinars: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠epicompliance.com/training-in...⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ [https://epicompliance.com/training-information-webinars] Originally Recorded: June 16, 2026.