OCR Audit Prep Program

BE PREPARED IN THE EVENT OF AN OCR AUDIT

The Office of Civil Rights (OCR) has received more than 85,000 HIPAA-related complaints since 2003. This staggering figure is expected to nearly double with the introduction of a newly released electronic complaint portal. The OCR is suggesting an increase of on-site audits, and no covered entity or business associate is exempt from a potential OCR privacy and security audit.

The cost of inadequate preparation simply isn’t worth the risk. Tampa Bay Compliance’s audit prep program provides your organization with critical information about the HIPAA Privacy and Security Final Rules, as well as the HITECH Breach Notification Rule. You will receive a detailed guide explaining how to respond to audit request that includes, but is not limited to the following:

• Steps to implement after receipt of an OCR Audit Letter (covering who to inform, how to assemble members of your audit team, as well as roles and responsibilities)
• How to implement a risk management plan (covering compliance and best-practice frameworks to internal policies and standards)
• Privacy Rule Requirements (covering notice of privacy practices for protected health information (PHI), rights to request privacy protection for PHI, access of individuals to PHI, administrative requirements, uses and disclosures of PHI, amendment of PHI, as well as, accounting of disclosures)
• Security Rule Requirements (covering administrative controls, physical controls and technical safeguards)

Tampa Bay Compliance has years of experience assessing organization compliance with the HIPAA/HITECH rules. We review your organization and provide the right solution for achieving compliance with HIPAA/HITECH, and when applicable, PCI DSS.