hipaa-consulting.com

What It Is

HIPAA-consulting.com is a professional consulting service site focused on U.S. healthcare privacy and security regulations, with Brian L Tuttle as the central figure. The site lists services including HIPAA/HITECH compliance consulting, HIPAA Security Risk Assessment, Privacy Audit, Business Associate Audit, Breach Investigation, Custom Policy Creation, employee training, webinars, onsite seminars, and Expert Witness services. Its positioning is closer to specialized advisory services than to a standardized security software product.

Core Capabilities and Delivery Model

In terms of protection scope, it mainly helps healthcare organizations identify compliance risks around protected health information (PHI), prepare for audits, build policies and procedures, and train staff. The text says it can serve Covered Entities and Business Associates, and also covers related consulting topics such as FDA Part 11, MIPS, SAMHSA, GDPR, and GBLA. Its delivery model is not traditional SaaS or hardware, but consulting-based delivery; the site explicitly mentions past onsite and remote risk assessments, indicating support for both onsite and remote risk assessment work. The consultant holds credentials including CPHIT, CHP, CHA, CCNA, CISSP, CBRA, and Net+, and discloses more than 20 years of experience in Health IT and compliance consulting.

Pricing, Management, and Alerts

The website does not disclose pricing, packages, project-based fees, or subscription models, nor does it specify payment methods, service levels, or delivery timelines. Buyers therefore need to request a quote separately and define the project scope before procurement. In terms of management and alerts, the content does not describe any continuous monitoring platform, automated alerts, dashboard, ticketing system, or SIEM integration. It is better understood as a one-off or periodic compliance assessment, audit, training, and policy-building service rather than a real-time security operations tool.

Pros and Cons

Its strengths are its strong vertical focus and specialization in U.S. healthcare HIPAA/HITECH scenarios. The consultant profile is also strong: the text states that he has conducted onsite or remote risk assessments for more than 1000 medical practices, hospitals, health departments, insurance plans, and business associates, and has experience with OCR-related work and expert witness support in litigation. The main drawback is that the public information is not very productized: there is no pricing, detailed case study information, methodology templates, sample deliverables, or support SLA. It also lacks clear explanations of automation and integration capabilities, only mentioning familiarity with Health IT systems such as EHR, imaging, transcription, and healthcare messaging.

Who It’s For and Access from China

It is best suited to healthcare providers, insurance plans, and business associates operating in the United States that handle PHI, need to prepare for OCR or federal audits, require investigation after a data breach, or need HIPAA employee training. For companies in China, unless they have U.S. healthcare operations or HIPAA obligations, its direct relevance is limited; they should generally prioritize China’s MLPS, Data Security Law, Personal Information Protection Law, and local healthcare data compliance services. The site does not provide information on network access from China, cross-border payments, or local alternatives, so China access status can only be rated as unknown.