Patient Privacy: HIPAA Audits Begin in Two Months--Are You Ready?

Why This Topic Matters

HIPAA audits can affect practice compliance programs, privacy and security processes, and vendor oversight. Understanding the broad audit landscape helps organizations prepare documentation and review internal safeguards before an audit notice arrives.

Article Sections

1. You Can’t Wait Until 2014

   Introduces the planned timing of OCR’s broader HIPAA audit program and explains the shift from a pilot phase to ongoing audits. It also frames the article’s emphasis on readiness and compliance review.

2. Consider Risk Assessment

   Discusses risk assessment as a core part of HIPAA privacy and security preparation. It references general update considerations, federal funding context, and a federal standards resource for assessing threats and vulnerabilities.

3. Who Counts As ‘Business Associates?’

   Reviews the broad topic of business associate oversight under HIPAA and HITECH. It addresses the types of outside entities commonly discussed in compliance planning and the distinction between business associate and confidentiality arrangements.

4. Use HHS Guidance to Prepare

   Points readers to HHS/OCR audit protocol guidance as a resource for understanding the kinds of documentation and review areas that may be involved in an audit.