OCR Issues Protocol for HIPAA Privacy and Security Audits

摘要

With 20 HIPAA privacy and security audits under their belts, the Office for Civil Rights on June 26 released their comprehensive audit protocol used to check if covered entities are following the rules and regulations of HIPAA.The audits are part of OCR's HIPAA Audit Program, created by the HITECH Act to analyze the key processes, controls, and policies of selected HIPAA-covered entities to ensure compliance.Starting in November 2011 OCR began auditing covered entities while fine-tuning their audit protocol. Another 95 audits are scheduled to be completed before the pilot audit program ends in December 2012.