In July, compliance professionals from across industries and healthcare organizations gathered on Chicago’s famed Magnificent Mile for four days of practical, hands-on learning at SCCE’s Basic Compliance & Ethics Academy and HCCA’s Healthcare Basic Compliance Academy. With intentionally limit…

This year’s Higher Education Compliance Conference and Research Compliance Conference brought compliance professionals together in San Antonio for several days of practical education, meaningful networking, and discussions on today’s most pressing issues impacting higher education and research o…

“Compounding” a prescription is a practice in which a licensed pharmacist combines, mixes, or synthesizes specific compounds or ingredients of a drug or multiple drugs to create a drug tailored to the needs of an individual patient who is unable to take standar…

Jamie Darch (jamie.darch@ropesgray.com, linkedin.com/in/jamie-darch-b646a064) is a Partner in Ropes & Gray’s health care practice in Chicago, IL. States have enacted laws targeting AI development and deployment by healthcare stakeholders, including payers, providers, and developers…

Durable medical equipment (DME) compliance has long been fertile ground for government scrutiny, but bone growth stimulators present a particularly nuanced—and risky—intersection of reimbursement rules, medical necessity, and marketing practices. A review of en…

In the landscape of 2026 hospice compliance, the nature of the “audit threat” has undergone a fundamental shift. For years, compliance officers focused on clinical eligibility—the “is the patient terminal?” question. However, as Medicare Administrative Contractors (MACs) refi…

Immigration compliance in healthcare has traditionally been associated with back-office functions such as Form I-9 completion and record retention. Recently, however, Immigration and Customs Enforcement (ICE) agents have entered hospital facilities see…

When it comes to protecting sensitive data, organizations often turn to established security frameworks like ISO 27001, NIST Cybersecurity Framework, PCI DSS, or SOC 2. Each of these has its strengths but managing them individually can be time-consuming and resource heavy. This i…

In the medical field, trust from patients and honest financial dealings are interconnected. This responsibility of honesty along with getting paid has a lot more to it; with the billing they also have to ensure that no one gets harmed, and that the doctors’ credibility is not affected. That’s wh…

, Compliance at Medcurity For The Compliance & Ethics Blog In an era when healthcare organizations strive to tell their stories, social media and web content offer powerful outreach tools. Yet, the consequences of mishandling patient information online are real—and the recent OCR s…

By: Dr. Michelle W. Hellstern, CHP, CHC When most people think about healthcare compliance, they picture regulatory citations, policy manuals, audits, and training modules. And while those are essential, compliance work is ultimately about people—protecting patients, preserving dignity, and ensuri…

HIPAA compliance has become more essential, and more nuanced, than ever. With technologies changing and cyber threats on the rise, compliance professionals are tasked with not only understanding HIPAA’s legal framework, but also translating those requirements into pract…

This article explores how HITRUST Certification helps businesses transition from compliance-driven processes to confidence-inspiring security practices. For organizations managing sensitive data, especially in industries like healthcare, finance, and technology compliance isn’…