Episode 0x15: People, Not Records

In this episode of Hack Dissection, Mike Lisi sits down with Donna Grindle, CEO and founder of Kardon and host of the long-running Help Me With HIPAA podcast, to unpack the complex world of healthcare cybersecurity, HIPAA, privacy, and patient data protection.

Donna breaks down what HIPAA actually covers, why compliance alone is not enough, and how the real financial and operational risks often come from ransomware, business disruption, failed mergers, insurance requirements, and poor preparation — not just regulatory fines.

The conversation also explores why healthcare data should never be thought of as just “records,” but as real people whose care, privacy, and safety can be impacted when systems fail. From real-world privacy violations to ransomware events affecting patient treatment, Donna shares why security in healthcare is deeply personal.

Mike and Donna also discuss the future of healthcare technology, including AI, bias in large language models, telehealth, electronic medical records, volunteer work through the Health Sector Coordinating Council, and why organizations need practical, reasonable, and appropriate security programs before the next wave of HIPAA changes arrives.