Phase 2 HIPAA audit notices are being issued

The HHS Office for Civil Rights (“OCR”) has begun issuing notices for Phase 2 HIPAA Audits applicable to covered entities and their business associates. In Phase 2, OCR will review the policies and procedures adopted and employed by covered entities and their business associates to satisfy standards and implementation specifications of the Privacy, Security, and Breach Notification Rules. Phase 2 audits will primarily be desk audits, however, some on site audits will occur.

Please be sure to check your spam filters and junk email folders because notices for Phase 2 HIPAA Audits are sent via email. The initial email notice for a Phase 2 HIPAA Audit seeks to confirm an entity’s address and contact information. Following confirmation of this contact information OCR will send a pre-audit questionnaire.

We have a number of clients who are undergoing Phase 2 HIPAA Audits and our experience in responding to these audits will minimize any potential disruption to your healthcare operations. Contact Clinton Mikel, Esq., at cmikel@thehlp.com, or at 248-996-8510, for guidance and counsel on how best to respond to any Phase 2 HIPAA Audit notice that you have received.

Additional information about OCR’s Phase 2 HIPAA Audits can be found on our blog at: https://www.healthlawattorneyblog.com/2016/03/ocr-launches-phase-2-of-hipaa.html