Patient Privacy: It's Official: HIPAA Audits Are in Full Swing

Why This Topic Matters

HIPAA audits can require organizations to quickly produce evidence of compliance, so understanding the broad areas under review helps practices reduce exposure and improve readiness.

Article Sections

1. Overview of phase two HIPAA audits

   Introduces the shift from the earlier audit phase to the current one and explains the general scope of entities involved. It also describes the mix of desk and on-site audits discussed in the article.

2. How phase two builds on phase one

   Summarizes the relationship between the earlier pilot audits and the current audit protocol. This section focuses on the program structure and how the audit approach was refined.

3. Business associate considerations

   Discusses the role of business associates in the audit process and the general compliance relationship between covered entities and their vendors. It addresses the need for oversight and awareness of privacy-related issues.

4. Preparing for audits

   Covers the kinds of documentation and policy readiness organizations should consider before an audit request arrives. It includes broad preparation areas such as written policies, agreements, and response readiness.

5. Demonstrating an ongoing compliance program

   Describes the importance of maintaining an active compliance effort and being able to show that it exists. The section also references ongoing review, updates, and related administrative preparation.