<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url><loc>https://washingtoncompliance.com/</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/about.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/what-is-hipaa-a-plain-language-overview.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/covered-entities-vs-business-associates.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/what-is-protected-health-information-phi.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/hipaa-penalties-and-enforcement.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/an-overview-of-the-hipaa-security-rule.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/administrative-physical-and-technical-safeguards.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/access-controls-and-authentication.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/encryption-and-the-security-rule.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/the-proposed-security-rule-updates-what-to-watch.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/an-overview-of-the-hipaa-privacy-rule.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/permitted-uses-and-disclosures-of-phi.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/the-minimum-necessary-standard.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/patient-rights-under-the-privacy-rule.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/what-is-a-hipaa-security-risk-analysis.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/conducting-a-risk-assessment-step-by-step.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/breach-notification-requirements.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/building-a-hipaa-compliance-program.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/washingtons-my-health-my-data-act-explained.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/washington-state-medical-records-retention.html</loc><changefreq>monthly</changefreq></url><url><loc>https://washingtoncompliance.com/articles/reporting-a-health-data-breach-in-washington.html</loc><changefreq>monthly</changefreq></url>

<url><loc>https://washingtoncompliance.com/articles/what-a-business-associate-agreement-must-contain.html</loc><lastmod>2026-07-13</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
<url><loc>https://washingtoncompliance.com/articles/risk-analysis-vs-gap-assessment.html</loc><lastmod>2026-07-13</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
<url><loc>https://washingtoncompliance.com/articles/questions-to-ask-a-hipaa-risk-analysis-vendor.html</loc><lastmod>2026-07-15</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
<url><loc>https://washingtoncompliance.com/articles/assigned-security-responsibility-the-security-official.html</loc><lastmod>2026-07-16</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url><url><loc>https://washingtoncompliance.com/articles/security-risk-analysis-for-a-hospital-enterprise-wide-scope.html</loc><lastmod>2026-07-17</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
<url><loc>https://washingtoncompliance.com/articles/addressable-vs-required-implementation-specifications.html</loc><lastmod>2026-07-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
<url><loc>https://washingtoncompliance.com/articles/security-incident-vs-reportable-breach.html</loc><lastmod>2026-07-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
<url><loc>https://washingtoncompliance.com/articles/the-hipaa-right-of-access-what-ocr-enforces.html</loc><lastmod>2026-07-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
<url><loc>https://washingtoncompliance.com/articles/hipaa-contingency-plan-requirements.html</loc><lastmod>2026-07-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
</urlset>