Blog
Four recent updates from HHS and trusted legal and compliance sources, with QCA's perspective on websites, communication and practice operations. HIPAA is the Health Insurance Portability and Accountability Act; PHI means protected health information.
Sources checked . These are curated summaries, not a live news feed or legal advice.
This is general information, not legal advice. Please consult with your own legal counsel about how this applies to your practice.
Website tracking · Source dated
A status check as of October 2026: website tracking guidance depends on what a page does and what information its tools collect.
Read article : Tracking tools on practice websites: what the court ruling left standing
Website tracking · Source dated
Two reported settlements show why website tools and advertising tags deserve an owner and a review, separate from HHS enforcement.
Read article : Website pixel lawsuits keep settling, even outside HHS enforcement
Rulemaking · Source dated
Reported rulemaking targets have moved. Use the waiting period to discuss existing security basics with your IT and compliance advisers.
Read article : The HIPAA Security Rule update is delayed: what to do in the meantimeBehavioral health · Source dated
Practices covered by Part 2 should discuss whether their website’s notice of privacy practices reflects the requirements that took effect in February 2026.
Read article : Behavioral health practices: the Part 2 compliance date has passed