HIPAA compliance audits coming; bits of detail emerge. Get ready now!

David Harlow, host of HealthBlawg

By David Harlow

First Posted at HealthBlawg on 2/26/2014

David Harlow, host of HealthBlawg
David Harlow, host of HealthBlawg

HIPAA cad logoOCR planning for the next round of HIPAA compliance audits continues.

A new information collection request will be filed soon (two months from now or so), according to the HIPAA audit questionnaire burden estimate published Monday, February 24. (H/T Art Gross, HIPAA Secure Now.) The filing shows that OCR intends to administer 1200 questionnaires to a mix of covered entities and business associates. The questionnaires are estimated to take 30 minutes to complete.

Once those questionnaires hit the street, the full force of OCR will not be far behind. In light of the latest multimillion dollar HIPAA penalty — this one levied by the Puerto Rican government against an organization that might actually be around long enough to cough up the big bucks, as opposed to Cignet (and there’s no telling what OCR might do in addition to that) — let’s just say it behooves all covered entities and busienss associates out there that have not yet put their house in order from a HIPAA/HITECH compliance perspective to do so now.

Do not pass Go. Do not collect $200. Go directly to: HIPAA Compliance.

Previous articleHealth Care Business Models in Transition Open Doors for Connected Health
Next articleHIT Bingo – A Reprise for HIMSS 2014
David Harlow LD is a health care lawyer, consultant, blogger, and thought leader. He is Host of Healthblawg, an award-winning blog highly regarded in both the legal and health policy blogging worlds. He is also Principal of The Harlow Group LLC, a health care law and consulting firm based in Boston, MA. His 25 years of experience in the public and private sectors affords him a unique perspective on legal, policy and business issues facing the health care community. David is also associated with the Mayo Clinic Center for Social Media, the Society for Participatory Medicine, HealthWorks Collective, and FierceHealthIT.