Health Insurance Portability and Accountability Act

Health Insurance Portability and Accountability Act  (HIPAA)

Introduction:

HIPAA: The Health Insurance Portability and Accountability Act of 1996 (HIPAA) has significantly changed business practices and policies for all Covered Entities (CE). As with many other Regulatory issues, HIPAA is largely a call to a strong control environment, with a focus on the necessary security safeguards to ensure the security of patients. Contrary to prevailing opinion, the achievement of HIPAA Security compliance is not reliant on complex technology solutions and strategies, but rather on simpler people and process-oriented control environment issues

In 1996 Congress passed HIPAA to improve the efficiency and effectiveness of the health care system.  In response to this regulation, the U.S. Department of Health and Human Services (“DHHS”) issued several new regulatory standards which apply to all covered entities.  This act mandates the adoption of a number of specific guidelines.  IRG has developed assessment services to aid covered entities in complying with the privacy and security regulations authorized by this act.

Our HIPAA consulting services include:

• HIPAA Consulting
• Gap Analysis
• HIPAA and HITECH Compliance Audit

Gap Analysis:

To become HIPAA compliant you must first know where you are not HIPAA compliant. That is why we have developed a easy to use Gap Analysis Survey Questionnaire. It doesn’t matter whether you are a covered entity or a business associate, this tool will give our experts the knowledge they need to point out what those gaps in HIPAA compliance are. One of our HIPAA expert consultants will review your questionnaire and make note in detail any compliance inadequacies or deficiencies and offer suggestions for improvement in regard to any such deficiencies in the form of a confidential written Gap Analysis Report. Not only will you receive a hard copy of this report for your records, but you also receive a confidential telephone consultation to discuss further questions you may have as well as the opportunity to gain even more insight from a professional the steps you need to take to improve HIPAA compliance in a reasonable, appropriate, and cost effective manner. Know for a fact which HIPAA policies and procedures need to be updated or implemented instead of playing a costly guessing game. HIPAA compliance can be time consuming, confusing and costly, allow our team to help you start the right way with the right tools at the right price.

HIPAA and HITECH Compliance Audit:

• Review all of your organization’s HIPAA security policies.
• Review all of your organization’s HIPAA privacy policies.
• Inspect your organization’s HIPAA risk analysis efforts and documentation.
• Inspect your HIPAA training efforts.
• Inspect your HIPAA privacy and security programs.
• Inspect your organization’s physical environment for potential HIPAA, HITECH, and Omnibus rule change violations.
• Provide specific guidance as to how to fix problems related to HIPAA, HITECH, and Omnibus rule change compliance.