News Headlines Article

HHS auditors release HIPAA audit protocol
Modern Healthcare

The Office for Civil Rights at HHS has published what it describes as “a comprehensive audit protocol” containing the requirements that will be assessed when it conducts privacy and security compliance audits as outlined in the American Recovery and Reinvestment Act of 2009. The act, also known as the stimulus law, mandated that HHS “provide for periodic audits” to ensure that covered entities and their business associates as defined in the Health Insurance Portability and Accountability Act of 1996 are in compliance with the latter law’s privacy and security provisions.