As you may recall, the HITECH Act required Health and Human Services (HHS), the federal agency in charge of administering HIPAA, to affirmatively conduct periodic audits to ensure that covered entities and business associates are complying with HIPAA’s privacy and security rules. Before HITECH, HHS was mostly responding to complaints and not conducting random audits of HIPAA compliance.
HHS’s Office for Civil Rights (OCR) has launched a pilot audit program and expects to complete 150 audits by the end of 2012. These audits will include requesting documentation as well as onsite visits and a final report noting compliance issues.
These HHS audits can lead to compliance reviews, resulting in monetary settlements or the imposition of civil money penalties. Covered entities and business associates, including employer-provided health plans and their service providers, should make sure their workforce training, policies and procedures, and security risk assessments are in place, easily accessible and up-to-date.
Source: JD Supra
Related Posts
Congress uncertain about how to address Medicare fees- If you aren’t dry brushing your skin, you should be
- Full Access: Personalize and Rise 4 Cost Effective Ways to Rank Higher on Google
- Body language can tell you if your patient will commit to care What you see is what you should hear
- The College of Chiropractic at Northwestern Health Sciences University graduates 102 students
- Sign-up for chiropractic’s 125th Anniversary Giveaway today
