HIPAA Audit Process by Xenon Health

1. HIPAA Audit Process

2. What is the HiPaa Audit Process? • Implementation of a formal audit process that will ensure that the privacy, security, and breach notification standards set forth in the Health Insurance Portability and Accountability Act of 1996 (HIPAA) are upheld • All entities that are covered under HIPAA are now eligible for the audit process • Hospitals • health insurers • health care clearinghouses • Any health care providers that transmit PHI electronically • Phase two of audit process includes auditing the entity’s business associates in order to ensure that all professional actions associated with the covered entity are HIPAA compliant

3. Steps of the Audit Process • OCR wishes to review a random sample of entities that is representative of the geographic, size, and structural diversity of all entities covered. • First a desk audit of the covered entity will occur • Followed by a desk audit of the entity’s business associates, • Finally there is the possibility of an onsite audit that will be even more rigorous and evaluate additional privacy requirements under HIPAA. • A selected entity will be notified of the audit by email and will then have approximately two weeks to begin to deliver the appropriate documents to OCR through a secure online portal.. All collected information will be analyzed, a draft of the findings will be presented to the audited entity, and the entity will have the ability to formally comment on any of the findings from the audit. • Lastly the final report will be published, highlighting general issues and room for improvement in all audited entities, while not releasing individual entities’ names or specific violations. • An individual entity will only be investigated further if a flagrant problem was found.

4. Importance of the Audit process for anesthesia companies • The audit process is important for anesthesia management companies and anesthesia providers who are covered by HIPAA regulations • Critical to understand the specific process and the objectives of the audit in order to prepare for an inevitable review in the near future. • Way for anesthesia management companies and providers to improve their security, identify any systemic flaws, and adopt a set of best practices that both honor and respect patients’ privacy

5. To learn more about our comprehensive anesthesia services, please visit www.xenonhealth.com Call us at 888.894.5143 E-mail us at info@xenonhealth.com