Skip to main content

Posts

Showing posts with the label Optometrist

OCR HIPAA Audit Results & Lessons - A Compliance Wake-up Call

Overview The results of the HHS/OCR Phase 2 HIPAA Compliance Audits found a widespread, totally unnecessary crisis in HIPAA compliance. The audit covered only 7 of the 180 HIPAA Audit topics (protocols). All audit inquiries and required supporting documentation were published well in advance of the audit. Covered Entities knew they among a carefully chosen small representative group from which auditees would be selected and had completed OCR pre-audit informational questionnaires. Two of the 7 audit topics, Risk Analysis and Risk Management are fundamental to HIPAA compliance. Nevertheless, 94% of Covered Entities and 88% of Business Associates failed the Risk Management audit and 86% of Covered Entities and 80% of Business Associates failed the Risk Analysis audit. More than half of the Covered Entities failed 3 of the other audit topics. Business Associates were audited on only three topics; the third was Breach Notification to Covered Entities. 67% of the small group of Busi...