New HIPAA Audit Program

December 8, 2011 – The Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) has introduced the The Pilot Audit Program to perform up to 150 audits of compliance with the privacy, security and breach notification standards adopted under HIPAA.  The program will only audit HIPAA-covered entities (health care providers, health plans and health care clearinghouses) and not their business associates.  Business associates will be included in future audits after the pilot phase.
 
The OCR will initially audit a sample of 20 covered entities to hone audit protocols.  These initial audits and subsequent evaluations will be completed by the end of April 2012.  The OCR will then begin conducting the majority of audits of covered entities in accordance with the revised protocols.
 
The audit contract was awarded to KPMG and will include a site visit and result in a formal report.  Those entities to be audited will receive a notification letter from OCR approximately 30-90 days prior to the site visit which will provide contact information for the auditor, explain the audit process and include an initial documentation request.  A copy of the notification letter can be found on the below OCR website.
 
More information on this audit program can be found by clicking below:
 
OCR Pilot Audit Program

Tags: Healthcare Reform