Pull Together Your HIPAA Audit Plan With These Pointers

It's never too late to start getting into compliance.

Assemble a team: "Covered entities should be assembling a team to review all privacy and security policies, procedures and practices, and should update and revise them as needed," Kenneth Rashbaum, Esq. of Rashbaum Associates in New York tells Eli. The team should be comprised of IT, health information management (known as medical records in some institutions), in-house counsel, the chief information security officer and/or an outside technology consultant experienced in security analyses, outside counsel with experience in HIPAA privacy and security compliance, and representatives of clinical departments (end users)," he adds. Rashbaum's [...]

- Published on 2011-12-16