Health Information Management

OCR building HIPAA audit plan with outside help

HIM-HIPAA Insider, May 31, 2010

HIPAA’s privacy and security enforcer has hired outside firm Booz Allen Hamilton to help build its HITECH-required HIPAA auditing plan, a spokesperson for the government agency tells HIPAA Update.

The Office for Civil Rights (OCR), which carries out for the Department of Health & Human Services (HHS) enforcement of the HIPAA privacy and security rules, says it does not have a timetable for when the audit plan will begin.

However, in an e-mail to HIPAA Update May 20, OCR says it is “presently engaged in a contract to survey and recommend strategies for implementing the HITECH audit requirement.”

HITECH, signed into law by Congress February 17, 2009, requires OCR to conduct “periodic audits” of covered entities regarding HIPAA privacy and security compliance. Booz Allen Hamilton will help OCR with the “how” and “when” of the audit program.

Read the full story on HIPAA Update.

Most Popular