hipaa compliance

---

Hi,

What steps do i need to do in a busniess to be hipaa compliant?

Thanks

@sam said in hipaa compliance:

Hi,

What steps do i need to do in a busniess to be hipaa compliant?

Thanks

@sam,

There are more details in this than what can be posted here but here are the basics:

• You need a HIPAA privacy and security office that is the point man for developing and implementing compliance. He or she will be your chief in this regard.

• You need to develop and implement policy and procedures for HIPAA compliance. Create policy and follow it.

• Provide HIPAA Training for all employees. Either create or find training out there that suits your companies needs. No one is excluded.

• You have to audit your business to determine what you're not doing and what may already be doing towards HIPAA compliance. You can hire someone externally or use OCR Audit Protocol from HSS. Also you may have to Risk Analysis of how you're handling PII and PHI.

• Make sure the services you're using (contractors, billing, transcription and even data destruction) have business associates agreements in place before turning over an PHI or PII data to them.

Audit Protocol from HHS.gov

Security Risk Assessment Tool from HealthIT.gov

Thanks,

Have a company that offers me a standard Hippaa process and procedures Manual for $1350 and ill need to customize it.

Does it make sense?

@sam ,

Right, So like all things compliance. Compliance will tell you what you need to do. They cannot tell you how you will accomplish it.

That company will provide for you a template. You will have to make that template fit your environment.