HIPAA compliance is an ongoing process that requires everyone in your organization to be aware of and accountable for their role, working as a team member in support of every other staff member responsible for HIPAA. What is the key to success for HIPAA compliance? A HIPAA compliance plan should include:

  • HIPAA policies to protect patient health information
  • Risk Analysis and Risk Management policies, with Risk Analysis conducted every year and Risk Management all year round
  • Breach Notification policies for responding to data breaches
  • Workforce training for everyone who has access to PHI, both electronic and non-electronic; repeat the training as needed, at least once a year
  • A contingency plan for emergencies caused by natural disasters, power outages or cybersecurity incidents