Scribd
Upload
405 views2 pages

HIPAA Readiness Checklist

This document is a HIPAA readiness checklist for a medical office. It outlines 6 key requirements for the office to address to comply with HIPAA regulations, including appointing a privacy officer, developing privacy policies and procedures, establishing a complaint policy, providing training to staff, designating resources to stay up to date on HIPAA, and meeting associated deadlines. The checklist notes whether each requirement has been addressed and provides space to note any necessary updates.

Uploaded by

Mia Jackson
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOC, PDF, TXT or read online on Scribd
405 views2 pages

HIPAA Readiness Checklist

This document is a HIPAA readiness checklist for a medical office. It outlines 6 key requirements for the office to address to comply with HIPAA regulations, including appointing a privacy officer, developing privacy policies and procedures, establishing a complaint policy, providing training to staff, designating resources to stay up to date on HIPAA, and meeting associated deadlines. The checklist notes whether each requirement has been addressed and provides space to note any necessary updates.

Uploaded by

Mia Jackson
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOC, PDF, TXT or read online on Scribd
  • HIPAA Readiness Checklist Overview: Introduces the HIPAA readiness checklist focusing on privacy, security, and compliance measures.
  • Implementation and Staff Training: Focuses on implementing policies, training staff, and establishing complaint procedures to comply with HIPAA.

HIPAA READINESS CHECKLIST

For ________________ Office


Checklist last updated ___________________________

#
1.

Requirement
Learn about HIPAA with special attention to: Privacy Security (awaiting final regs.) Transactions and codes Become familiar with HIPAA terms. (Glossary at http://www.state.oh.us/hipaa/glossary.htm) Establish process/policies/procedures to address Privacy: Appoint a privacy officer or assign privacy officer duties to a specific staff member. Develop a notice of privacy, including acknowledgement form. Define who can access and who cannot access protected health information (PHI). Institute a policy allowing patients to access their medical records o Establish a procedure to allow patients to amend their medical records Create a procedure to document all nonauthorized disclosures outside of treatment, payment, and health care operations (TPO). Develop audit trails to provide patients with a listing of all who accessed or received information from their records. Establish a protocol that states release of only the minimum information necessary, where applicable. Review information security including passwords and access to information. Revise your authorization form to include the specific HIPAA language. Identify your business associates.

N Update Notes

2.

Update Notes

3.

Update Notes

4.

o Adopt a business associate agreement form (see sample link). o New contracts must have a business associate agreement at the time of signing o Existing contracts must have a business associate agreement when the contract is amended OR o By April 14, 2004 if no renewals, or changes have occurred to the contract since 10/12/02 Establish a complaint policy Y N Update Notes

5.

6.

Training Determine information that needs to be communicated to staff, including all revised policies, procedures, and forms. Develop an in-service program for your staff. Advise each staff member how to report any breaches in the privacy of health information in your practice. Advise all staff of penalties for breaching confidentiality under HIPAA. Resources Appoint a staff member to keep abreast of new information or interpretations of provisions and communicate to you. Take advantage of Web sites with HIPAA information (see links). Deadlines Privacy, except business associate agreement, by April 14, 2003. Codes and Transactions by October 2003. Business associate agreement due date based on contract status (see #3 above). Security final regs. communicated.

Update Notes

Update Notes

You might also like