The 2016 Phase 2 HIPAA Audit Program

Here are some links and suggestions on what you can do to prepare for the Phase 2 Audits by The Department of Health & Human Services Office for Civil Rights:

  1. Review the 2016 Phase 2 HIPAA Audit Program for:
    1. Background information
    2. The selection process for who will be audited
    3. Audit Timeliness
    4. How consumers will be affected
    5. What happens after an audit
    6. And for other helpful information
  2. Review your HIPAA policies and procedures on Privacy, Security, and Breach Notification, ensuring that they are all current.
  3. Spread awareness of your policies and procedures throughout your organization via staff meetings, your intranet, and/or in-services.
  4. Have your IT staff update spam folders to allow receipt of emails from OCR; OSOCRAudit@hhs.gov or check your spam and junk folders.
  5. Be prepared to identify your business associates with contact information. A sample spreadsheet is available at Business Associate Sample Spreadsheet