What is HIPAA compliance and why does it matter?
The Health Insurance Portability and Accountability Act (HIPAA) Security Rule, or HIPAA, specifically focuses on the safeguarding of PHI through the implementation of administrative, physical, and technical safeguards. Compliance is mandated to all organizations defined by HIPAA as a covered entity and a business associate. Compliance also ensures that businesses meet the requirements of the Breach Notification Rule as formalized by the Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009 and the Omnibus Rule of 2013.The scope of review includes 3 fundamental security parameters
This assessment reviewed the use, disclosure, and accessibility of PHI. The scope of this review included OpenVPN, Inc.'s policies and procedures related to HIPAA Compliance; OpenVPN, Inc.'s information system(s) and platform(s) maintaining PHI.HIPAA compliance must be satisfied by all employees and business associates
The HIPAA Security Rule specifically focuses on the safeguarding of PHI through the implementation of administrative, physical, and technical safeguards. Compliance is mandated to all organizations defined by HIPAA as a covered entity and a business associate.HIPAA compliance requires audits in several disciplines
The requirements of the HIPAA Security Rule are organized according to safeguards, standards, and implementation specifications, including:- Administrative Safeguards
- Physical Safeguards
- Technical Safeguards
- Organizational Requirements
- Policies, Procedures, and Documentation Requirements
HIPAA compliance requires ongoing evaluation
HIPAA compliance requires periodic maintenance, meaning compliance is an ongoing practice.