Medical Economics August 22, 2025
Nearly all small health care organizations believe they’re HIPAA compliant, but most face major cybersecurity risks and possible penalties, a Paubox study warns.
Small medical practices, which make up more than 90% of U.S. health care providers, overwhelmingly believe their email systems are HIPAA compliant, but a new report from email security firm Paubox finds that nearly all of them are mistaken.
The study, based on a survey of 214 IT leaders and practice managers from organizations with fewer than 250 employees, revealed that 98% of small practices think their platforms automatically encrypt emails. In reality, common tools like Microsoft 365 and Google Workspace often fail to provide the protections required by federal law.
The gap arises because encryption may...







