• E-mail
• Print
• RSS

Key components of a compliance report

Healthcare Auditing Weekly, July 26, 2005

HIPAA outlines the responsibilities of covered entities for conducting compliance reviews, keeping records of reviews, and submitting reports to HHS. Because of this, many organizations require developing a compliance report. Though there are many ways to compile a compliance report, the following four elements are key to any report:

1. HIPAA privacy and security policy, procedure, and document inventory: This enables quick reference in the event an investigator requires a specific document.

2. HIPAA privacy and security training record: This should describe the nature of the training provided to each target group and the percentage of employees trained within the timeline described in the organization's policies and procedures.

3. HIPAA privacy and security compliance assurance master plan and results tracking: This serves to provide an overall view of all compliance assurance tasks performed.

4. Compliance results summary: This provides a numeric overview of privacy complaints and security incidents, a comparison to the previous year, the average number of days it takes to dismiss or resolve an incident, and the cost.

The above tip is an excerpt from the book "Guide to HIPAA Auditing: Practical Tools and Tips to Ensure Compliance," copyright 2005 by HCPro, Inc. This is a step-by-step book and CD-ROM resource for auditing and monitoring your HIPAA compliance program. Click here for more information or to order your copy today.

Back to top

• E-mail to a Colleague
• Print
• RSS
• Archive