![]() If in doubt about your organization’s compliance obligations, seek professional advice from a HIPAA compliance professional.Make sure you have a way of finding out about changes to HIPAA and temporary Notices of Enforcement Discretion.Determine whether or not your organization is exempted from reporting data breaches to the State Attorneys General.Ensure measures are put in place for promptly notifying individuals and HHS´ Office for Civil Rights of data breaches.Be aware that the Security Rule consists of more than just the Administrative, Physical, and Technical Safeguards.Minimize the number of designated record sets in which PHI is maintained to simplify the management and protection of PHI.Conduct an audit to determine where PHI is created, received, stored, or transmitted, and how it is shared with Business Associates.Developing policies that restrict the flow of information can negatively impact healthcare operations. Understand what PHI is – and what it isn´t.If required to comply with any Security Rules, appoint a Security Officer. If required to comply with any Privacy Rules, appoint a Privacy Officer.Establish whether or not your organization is required to comply with HIPAA and, if so, which Rules apply to your organisation’s operations.Our updated HIPAA compliance checklist covers all the areas that you need to consider before embarking on the journey to HIPAA compliance:
0 Comments
Leave a Reply. |