• E-mail
• Print
• RSS

CMS, OESS post new information and checklist for sercurity investigations and compliance review

Contemporary Long-Term Care Weekly, March 7, 2008

On February 20, the Office of E-Health Standards and Services (OESS) posted new information on the CMS Web site regarding upcoming security investigations and compliance reviews.

"Onsite investigations may be triggered by complaints alleging non-compliance, while onsite compliance reviews will typically arise from non-complaint related sources of information such as media reports or self-reported incidents," according to the Web site.

In addition, OESS posted a document entitled "Information Request for Onsite Compliance Reviews" on the Web site. This document serves as a checklist and indicates information that may be requested during an investigation or review. However, the list is not comprehensive, nor is it limiting. "The individual circumstances of each applicable case will dictate the type of information that will be requested during an investigation or review," according to the Web site.

OESS also notes that covered entities review the areas of vulnerability associated with the security of electronic protected health information, as highlighted by the checklist, to evaluate the entity's current level of compliance.

• Comment
• E-mail to a Colleague
• Print
• RSS
• Archive

Comments