HIPAA Audit: Maximize Your Plan for Phase 2 Audit Focus

Why This Topic Matters

OCR audit activity can expose gaps in HIPAA compliance, so understanding the audit protocol helps organizations evaluate policies, procedures, and readiness across privacy, security, and breach notification topics.

Article Sections

1. Phase 2 HIPAA audits and OCR focus

   Introduces the current audit effort and the types of organizations included. It also notes the general focus areas being reviewed during the audit process.

2. Find Out Phase 2 Tools

   Discusses the OCR audit protocol as a preparation resource and where it is published. It frames the document as a tool for assessing compliance readiness.

3. Audit inquiry

   Describes the audit inquiry portion of the protocol and its role in identifying what auditors may request. It emphasizes using the protocol to evaluate organizational preparedness.

4. Do this

   Addresses the need to review compliance programs against current audit focus areas. It presents the section as a general call to verify that required policies and procedures are in place.

5. For example

   Covers a broad example of operational planning related to data recovery and continuity planning. It connects preparedness efforts to the organization’s ability to maintain access to electronic information.

6. Don’t panic

   Explains that organizations may identify compliance gaps when reviewing the protocol, but that expectations can vary by size and capability. It presents the discussion as reassurance that preparation is scalable.