HIPAA, HITECH Final Rules Expected by Early 2011
Also on OCR's plate is its "periodic audit" plan that must be rolled out in accordance with HITECH. There is no timetable or details on the audit plan yet, though OCR did tell HealthLeaders Media in May it hired Booz Allen Hamilton to help build its HITECH-required HIPAA auditing plan.
Then, OCR said it is "presently engaged in a contract to survey and recommend strategies for implementing the HITECH audit requirement."
Asked again this month about the status of the audit plan, OCR essentially said it is not ready to release the plan.
"Pursuant to Section 13411 of HITECH,OCR is in the process of developing a program to conduct periodic audits to ensure that covered entities and business associates comply with HIPAA Privacy and Security Rule requirements," Rachel Seeger, MPA, MA, senior health information privacy outreach specialist for OCR, wrote in an e-mail to HealthLeaders. "At this time, audit report is pre-decisional and not available publicly. OCR does not have a timetable for implementation."
Dom Nicastro is a senior managing editor at HCPro, Inc. in Danvers, MA. He edits the Briefings on HIPAA newsletter and manages the HIPAA Update Blog. E-mail him at dnicastro@hcpro.com.
- Urologists 'Outraged' Over PSA Test Challenge
- New Facebook Page Gathers Stories of Medical Harm
- Luxury Hospital Facilities Put Patient Experience First
- Five Hospitals Share Three Secrets to Improve Knee Surgery Outcomes
- Heartland Health Joins Mayo Clinic Network
- Beleaguered Fairview Health CEO to Retire in July
- Challenging Physicians to Help Improve the ED
- Health Insurance Exchanges Put Defined Benefits to the Test
- For hospitals and insurers, new fervor to cut costs
- The Power of Plugged-In Physicians


Comments are moderated. Please be patient.
Rachael Brownell (10/25/2010 at 11:12 AM)
This is a fascinating topic and an interesting perspective. Thanks for sharing.