Feds Unsure About HIPAA Enforcement Practices
Sue McAndrew, the OCR deputy director for Health Information Privacy, asked later in the day by HealthLeaders Media, said she did not yet know the process by which HHS will conduct audits.
OCR may build on existing types of audits or perhaps partner with the inspector general, McAndrew speculated.
"We are basically in the process of doing some scanning and weighing our options of what kinds of audit programs are out there and what turns out to be the most effective," McAndrew said.
OCR has only levied two major fines—Providence Health & Services in July 2008 ($100,000 fine and corrective actions) and CVS in February 2009 ($2.25 million fine).
According to HHS, the federal government will spend about $24.3 million on privacy and security efforts, including:
- Audits
- Reports to Congress
- Training for state attorneys general
- Carrying out regulatory and enforcement requirements of HITECH
Dom Nicastro is a senior managing editor at HCPro, Inc. in Danvers, MA. He edits the Briefings on HIPAA newsletter and manages the HIPAA Update Blog. E-mail him at dnicastro@hcpro.com.
- Urologists 'Outraged' Over PSA Test Challenge
- New Facebook Page Gathers Stories of Medical Harm
- Luxury Hospital Facilities Put Patient Experience First
- Five Hospitals Share Three Secrets to Improve Knee Surgery Outcomes
- Heartland Health Joins Mayo Clinic Network
- Beleaguered Fairview Health CEO to Retire in July
- Challenging Physicians to Help Improve the ED
- Health Insurance Exchanges Put Defined Benefits to the Test
- For hospitals and insurers, new fervor to cut costs
- The Power of Plugged-In Physicians


Comments are moderated. Please be patient.