Traditionally, OCR would audit covered entities when such entities submitted reports of breaches. Now, the OCR plans to conduct periodic audits to ensure continued compliance with HIPAA’s security rule, as opposed to retroactive auditing.
According to the report, initial audits will consist of “desk audits” in which OCR will ask entities to submit security policies and procedures for review. Some in-person audits may occur.
More articles on HIPAA:
Vermont physician office burglarized, 2,000 records compromised
Why are healthcare data breaches so common?
Fitbit adds HIPAA compliance features to its Wellness division
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit
