HIPAA Compliance | NAVEX Global

Addressing HIPAA Compliance

Patient healthcare information is important. According to the Healthcare Insurance Portability and Accountability Act (HIPAA), it’s also the law. Healthcare organizations, HIPAA-covered entities, and business associates must comply with the information privacy and security protocols outlined in the HIPAA guidelines. Protected Health Information (PHI and e-PHI) standards apply across all physical, network, and process security measures.

Healthcare organizations often underestimate the amount of ePHI they generate: medical devices, mobile devices, messaging and other applications, backup tapes, and many other tools and process store sensitive, protected patient data. Fines for violating HIPAA’s medical privacy standards can range anywhere from $100 to $50,000 per violation, and reach up to $1.5 million dollars per year for each violation. With personal and protected information becoming more of a priority for individuals as well as regulators, HIPAA-covered entities must understand how HIPAA regulations apply to their organization.

Learn how to make your organization HIPAA compliant

Medical Privacy Policies & Procedures

A process to manage policy creation, approval and employee attestation for all applicable HIPAA regulations.

Corporate-wide Awareness

A communications plan that informs employees of their HIPAA responsibilities and provides tailored instruction to employees in positions of high risk.

Build HIPAA Requirements into Frameworks and Controls

Stay audit-ready by standardizing and streamlining compliance with HIPAA rules and safeguards.

HIPAA Compliance Training

Effective compliance training should include regular tests for understanding and completion tracking to ensure commitment to HIPAA responsibilities.

HIPAA Security Violation Reporting

Comprehensive whistleblower hotline and incident management processes to ensure proper and timely reporting of potential HIPAA compliance violations.

Supply Chain Alignment

HIPAA medical privacy standards must be practiced by each third party responsible for handling PHI on behalf of the organization.

Step 1

Make sure your policies stay in alignment with evolving laws, guidelines, regulations and standards.

Step 2

Offer multiple whistleblower reporting methods, including a compliance hotline to receive timely reports of potential HIPAA compliance violations.

Step 3

Manage HIPAA as part of a multi-regulation compliance program. Map compliance requirements to controls, risks, policies, and procedures

Step 4

Train the right people on their HIPAA responsibilities to mitigate risks of HIPAA violations.

Step 5

Ensure your third parties and vendors are following the proper procedures for protecting PHI with third party due diligence software.