About
Hi, I’m Griffin.
In January 2025 I read the proposed changes to the HIPAA Security Rule and had one thought: small healthcare can’t do this alone. I’d run a therapy practice. I knew exactly who would end up holding the bag — an office manager or an owner, already doing three jobs.
I’d also spent years on the other side, doing security work for a large health system and the Defense Health Agency. The controls aren’t mysterious. What small organizations lack is someone to do the work every month and keep the proof.
So I built that. For 18 months I served as the security officer for One Therapy Network and its clinics, and turned everything I did by hand into an engine: automated inventory, continuous evidence, and reviews that draft themselves so a person can focus on judgment.
HIPAA Made Simple is the result. I’m the named security officer behind it, and I live in Dallas–Fort Worth, Texas.
Therapitas
Founded and grew Therapitas, a therapy practice in Oklahoma. Learned firsthand what compliance looks like from the owner’s chair.
Beth Israel Lahey Health
Security work for a Harvard teaching hospital.
Defense Health Agency
Stood up the DHA’s zero trust security program (2024–25).
HIPAA Made Simple
Founded Compliance Rehab LLC in 2025. Spent 18 months as security officer for One Therapy Network and its clinics, building the engine behind HMS.
Let’s talk about where you stand.
Send us your current policies and get a free gap analysis — or grab 30 minutes with Griffin to talk through where you stand.