HIPAA Audit Program
a self administered proactive tool
The HIPAA compliance requirements are contained in the HIPAA Privacy and Security Rules – not in the Act itself. The subsequent amendments in HITECH and the Final Omnibus Rule have been integrated into the original documents, but it is important if you are further researching.
The requirements will vary according to the nature of an individual´s or organization´s business. For example, it will not be necessary for a software development company to distribute a Notice of Privacy Practices to patients, although it will likely be necessary for the software development company to develop and implement policies relating to the physical and technical safeguards of the Security Rule.
One area of the Security Rule safeguards that have confused is the distinction between “required” safeguards and “addressable” safeguards. Guidance given for HIPAA compliance is that both sets of safeguards are required unless it can be shown that an addressable safeguard is either unnecessary or that the objective of the safeguard is met by an appropriate alternate measure.
HITECH requires the HHS Office for Civil Rights (OCR) to conduct periodic audits of a covered entity and business associate compliance with the HIPAA Privacy, Security, and Breach Notification Rules.
The Health Insurance Portability and Accountability Act (HIPAA) Security Rule requires that covered entities and their business associates conduct a risk assessment of their healthcare organization. A risk assessment helps your organization ensure it is compliant with HIPAA’s administrative, physical, and technical safeguards. A risk assessment also helps reveal areas where your organization’s protected health information (PHI) could be at risk. To learn more about the assessment process and how it benefits your organization, visit the Office for Civil Rights' official guidance.
Order HIPAA Audit Program Download Sample
Compliance Management Kit - includes HIPAA Audit Program
The Compliance Management tool kit comes in three (3) versions: Silver, Gold, and Platinum. In addition we offer a white paper on Compliance Requirements.
Order Industry Standard Compliance Kit