Compliance: Follow 6 Steps To Shore Up HIPAA Compliance

Why This Topic Matters

HIPAA expectations can change over time as technology and enforcement practices evolve, so organizations need to keep policies, training, and operational safeguards current. The article helps readers understand the broad compliance areas that may warrant a periodic review.

Article Sections

1. Overview of HIPAA enforcement concerns

   Introduces the compliance context and why organizations may need to reassess privacy and security operations. It frames the article around broader enforcement and risk-management concerns.

2. Evaluate your policies and procedures

   Discusses reviewing existing HIPAA policies and procedures and considering whether updates are needed. The section focuses on maintaining current written compliance materials.

3. Assess reasonableness and technology safeguards

   Addresses how technology changes can affect privacy and security expectations. It covers general questions organizations may consider when evaluating safeguards for electronic information and related tools.

4. Train employees

   Explains the importance of periodic workforce training tied to updated compliance policies. It emphasizes reinforcing privacy and security awareness among employees.

5. Self-audit

   Describes the need for regular internal review of compliance practices. The section focuses on checking whether processes are being followed and remain effective.

6. Revisit your policies and procedures

   Encourages recurring review of HIPAA materials rather than letting them become outdated. It highlights the value of scheduled reassessment over time.

7. Consider HIPAA security in IT purchases

   Covers selecting technology with security considerations in mind. The section discusses reviewing system safeguards and understanding general vulnerabilities during vendor or product decisions.