Red Flags for HIPAA Policy Compliance

摘要

Health information management (HIM) professionals tend to take for granted that written policies and procedures are required to comply with the full scope of HIPAA's Privacy and Security rules.However, HIPAA and similar regulations are long and technically complex, which can make it a daunting task to institute and maintain a fully compliant set of policies..There have been few efforts to standardize policies-or the content they should contain-to address HIPAA compliance for covered entities (CE) and business associates (BA). It's up to each organization to determine what policies it needs and get them implemented. But beware red flags that can attract unwanted attention from the Office for Civil Rights (OCR). OCR has specific rules about mandated policy documentation, which are used as key evaluation materials.This article looks at the 10 most common red flags for HIPAA policy compliance.