The key to success for HIPAA compliance is to make sure you have the required safeguards in place.

Administrative Safeguards

The administrative safeguards focus on how the organization is managed. HIPAA requires policies, procedures, and internal controls that follow HIPAA. Examples include appointing privacy and security officials, having an up-to-date notice of privacy practices, training the workforce, and supervision to ensure the policies are being followed. Another key administrative safeguard is managing communications with patients. Patients have the right to access their own medical records, and they may authorize others to receive their protected health information. Policies, procedures and training are needed to ensure patients’ rights are protected and that staff know how to protect those rights. The HIPAA E-Tool® has an Administrative Safeguard Checklist to help you verify you have every Administrative safeguard required.