HIPAA audits and enforcement are now a significant reality, and settlements for violations are being announced for more violations regularly.  Now, with the increases in breach reporting and the HIPAA random audit program, enforcement of HIPAA is something that every HIPAA entity and business associate needs to be aware of and prepared for, by taking the proper steps in advance to have your compliance in order and the documentation to prove it.

Knowing what questions are likely to be asked and what documentation is necessary to show compliance are key to preparations for HIPAA compliance inquiries, and this session will explore a number of sets of questions and the issues they revealed, leading to enforcement action.

HIPAA violations can occur for a wide variety of reasons, and if HHS investigates, you may wind up on the receiving end of multi-million-dollar penalties, and corrective action plans that can easily cost ten times the cost of the settlement amount or more.  If you are not prepared to address issues that have been shown to be a problem in prior breaches and violations, HHS may use a heavy hand in making an example of you – even the head of the HHS Office for Civil Rights has said he’s looking for a “big, juicy settlement” – you don’t want to be that settlement!

Not only that, if you don’t address the issues that have been shown to be a problem for others in the past, you are leaving yourself open to having those same problems yourself, and have to report breaches or be subjected to an investigation when a patient complains.

Finally, the HIPAA Audit program is required by law and is not going away any time soon.  While HHS may still be absorbing the results of the last round, we now know what kind of questions and expectations may be involved in the final program, and being ready to survive a HIPAA Audit is essential.

The HIPAA Random Audit program is being refocused and redefined to make it more relevant to finding and correcting some of the most prevalent security and privacy compliance issues, based on the experience gained in the 2012 and 2016 audits and in the HIPAA Breach Notification process.

Learning Objectives:

HIPAA Audits have been few and far between in the past, but that’s now changing – the HHS is now auditing HIPAA covered entities and business associates even if there have been no complaints or problems reported. Fines and penalties for violations of the HIPAA regulations have been significantly increased and now include mandatory fines for willful neglect of the rules that begin at $10,000 minimum and can reach $50,000 per day. The HIPAA Audit Protocol will be examined along with the sets of questions asked at other HIPAA audits previously.

  • Find out what HHS OCR is likely to ask you if you are selected for an audit, and what you’ll have to have prepared already when they do.
  • Find out what the rules are that you need to comply with and what policies you can adopt that can help you come into compliance.
  • Learn how having a good compliance process can help you stay compliant more easily.
  • Find out what you’ll need to have documented to survive an audit and avoid fines.
  • Learn how to export the contents of the HIPAA Audit Protocol and use them as the foundation of your compliance activities and documentation.

Areas Covered in the Session:

  • HIPAA audit and enforcement programs
    – How they work
    – Areas that caused the most issues in prior audits and enforcement actions
    – What kind of issues and what kind of entities had the most problems
    – Where entities need to improve their compliance the most
    – Typical risk issues that lead to breaches of health information
    – How those issues may become a target for auditors in the next round
  •  How to prepare for an HIPAA compliance audit
    – Knowing what questions are likely to be asked and have been asked at prior HIPAA compliance audits
    – USDHHS updated protocol for the HIPAA audits, so it is possible to know
    – Which entity may be subject to an audit or enforcement investigation
    – How to prevent issues that could lead to violations and fines
    – Questionnaires that have been used in past and may be used for a future review.
  • Information and documentation
    – What information and documentation required in advance for an audit or enforcement review at any time
    – How to know if you may become the subject of an audit or enforcement action,
    – What you can do to help limit your exposure
    – How most enforcement actions come about and what can be done to prevent incidents that lead to enforcement activity.
Related Courses:

Suggested Attendees:

  • Healthcare CEOs
  • Healthcare CFOs
  • Chief Compliance Officers
  • HIPAA Officers
  • Privacy Officers
  • Security Officers
  • Providers
  • Office and Practice Manager
  • Health Information Manager
  • Healthcare Counsel/lawyer

About The Presenter:

Jim Sheldon-Dean is the founder and director of compliance services at Lewis Creek Systems, LLC, a Vermont-based consulting firm founded in 1982, providing information privacy and security regulatory compliance services to a wide variety of health care entities.  He is a frequent speaker regarding HIPAA, including speaking engagements at numerous regional and national healthcare association conferences and conventions and the annual NIST/OCR HIPAA Security Conference.  Sheldon-Dean has more than 36 years of experience in policy analysis and implementation, business process analysis, information systems and software development, and eight years of experience doing hands-on medical work as a Vermont certified volunteer emergency medical technician.  Sheldon-Dean received his B.S. degree, summa cum laude, from the University of Vermont and his master’s degree from the Massachusetts Institute of Technology.

After Registration

You will receive an email with login information and handouts (presentation slides) that you can print and share to all participants at your location.

System Requirement

Operating System: Windows any version preferably above Windows Vista & Mac any version above OS X 10.6
Internet Speed: Preferably above 1 MBPS
Headset: Any decent headset and microphone which can be used to talk and hear clearly

Can’t Listen Live?
No problem. You can get access to On-Demand webinar. Use it as a training tool at your convenience.

For more information you can reach out to below contact:

Toll-Free No: 1-302-444-0162