06/14/2026
98% of providers who believe they’re HIPAA compliant…aren’t.
Not because they don’t care.
Because they’re relying on assumptions.
In Microsoft 365, compliance follows a shared responsibility model.
The platform provides the tools.
You’re responsible for how they’re configured, enforced, and monitored.
That includes:
Who can access data
How it’s shared
Whether activity is logged
How incidents are detected
Most environments can support compliance.
Fewer can prove they actually do.
That’s the difference between the 98% and the 2%.
Explore what separates them—and what you should be able to verify in your own environment.
https://threewill.com/most-providers-think-theyre-hipaa-compliant-98-of-them-are-wrong/?utm_source=hootsuite&utm_medium=threewill&utm_term=facebook&utm_content=6e632fe6-bc11-4f32-bdd6-1230dd25fed1&utm_campaign=
Most care providers believe they’re HIPAA compliant—but 98% aren’t. Learn what to verify in Microsoft 365 and how to confirm where you actually stand.