Resources

White Papers

Excerpt from our latest white paper:

HIPAA Phase II Audits Are Underway…Will You Be Ready?

Now that the Department of Health & Human Service (HHS), Office of Civil Rights (OCR) has published the long-awaited Phase II Audit Protocols for HIPAA compliance, the process is in full swing. What does this mean to Covered Entities (“CE”) and their Business Associates (“BA”)? In short, CEs and BAs must make sure that they are in compliance with the Privacy and Security regulations before OCR comes calling.

A little background. The 2009 HITECH Act required HHS to conduct periodic audits to ensure compliance with the HIPAA Privacy, Security and Breach Notification Rules. In 2011, OCR began a pilot audit program to develop a long-term protocol for future audits. Then in 2012 “Phase I” audits applied the initial protocol to audit 115 Covered Entities, both to measure the effectiveness of the protocol and also evaluate the subject CE’s efforts with HIPAA compliance…

Helpful Links: