Question

How is HIPAA monitored or who makes sure organizations are in compliance?

Answer 1

Ans.

HIPAA Enforcement

HHS' Office for Civil Rights is responsible for enforcing the Privacy and Security Rules. Enforcement of the Privacy Rule began April 14, 2003 for most HIPAA covered entities.

It means that you have done the work to satisfy the elements of the Security Rule, you have policies and procedures in place to address the elements, you are knowledgeable in HIPAA as it applies to your business, you document everything and keep this documentation, you create an ongoing training program and you create

HIPAA covered entities were required to comply with the Security Rule beginning on April 20, 2005. OCR became responsible for enforcing the Security Rule on July 27, 2009.

As a law enforcement agency, OCR does not generally release information to the public on current or potential investigations.

Enforcement Process

Learn how OCR enforces the Privacy and Security Rules and learn what OCR considers during its initial intake and review of a complaint. A flow diagram shows the HIPAA Complaint Process.

Enforcement Highlights

See a summary of OCR’s enforcement activities and up to date monthly results, including the number of cases in which corrective action was obtained, no violation was found, or other resolutions were achieved.

Enforcement Data

View our annual numbers of enforcement cases shown nationally and by state.

Case Examples and Resolution Agreements

View examples of the corrective actions OCR has obtained from covered entities.

This widget is on your private and secure website provided by Compliance Helper but may also be displayed on your marketing website as a sign of your on-going HIPAA compliance. Internally you are assured that you are compliant and externally your business partners are assured that you are compliant.

provider in your organization use the database to access the medical record of a patient who was seen by another provider in the organization-

Can a provider use the database to access the medical record of a patient who was seen by another provider in the same organization? No, he/she must create a new record for the patient based on his/her personal interactions with the patient. No, he/she must obtain written consent from the patient.