HIPAA Compliance | NAVEX Global

Addressing HIPAA Compliance

The privacy and security of patient healthcare information is important and, with the launch of the Healthcare Insurance Portability and Accountability Act (HIPAA) of 1996, it’s also the law. Healthcare organizations, HIPAA-covered entities, and business associates must comply with the information privacy and security protocols outlined in the HIPAA guidelines. This includes ensuring Protected Health Information (PHI and e-PHI) standards are applied across all physical, network and process security measures.

Fines for violating HIPAA’s medical privacy standards can range anywhere from $100 to $50,000 per violation, and reach up to $1.5 million dollars per year for each violation. Over the last few years alone, HIPAA compliance enforcements have hit $20 million dollars. With personal and protected information becoming more of a priority for individuals as well as regulators, HIPAA covered entities need to fully understand how HIPAA regulations apply to their organization.

See How HIPAA Compliance Training Can Help

Medical Privacy Policies & Procedures

A process to manage policy creation, approval and employee attestation for all applicable HIPAA regulations.

Corporate-wide Awareness

A communications plan that informs employees of their HIPAA responsibilities and provides tailored instruction to employees in positions of high risk.

Incentives & Disciplinary Measures

Malicious or accidental violations of HIPAA security must be met with appropriate consequences, and proper HIPAA compliance should be acknowledged and rewarded when applicable.

HIPAA Compliance Training

Effective compliance training should include regular tests for understanding and completion tracking to ensure commitment to HIPAA responsibilities.

HIPAA Security Violation Reporting

Comprehensive whistleblower hotline and incident management processes to ensure proper and timely reporting of potential HIPAA compliance violations.

Supply Chain Alignment

HIPAA medical privacy standards must be practiced by each third party responsible for handling PHI on behalf of the organization.

Step 1

Make sure your policies stay in alignment with evolving laws, guidelines, regulations and standards.

Step 2

Offer multiple whistleblower reporting methods, including a compliance hotline to receive timely reports of potential HIPAA compliance violations.

Step 3

Train the right people on their HIPAA responsibilities to mitigate risks of HIPAA violations.

Step 4

Ensure your third parties and vendors are following the proper procedures for protecting PHI with third party due diligence software.