HIPAA Auditor Involved in Own Data Breach
Asked if OCR considered the KPMG involvement on this 2010 breach at any level when considering it for the HIPAA audit contract, McAndrew only said, “the award of the HIPAA audit contract was the result of HHS’ usual, rigorous, competitive process. Specific questions regarding the contract award are procurement sensitive.”
The process to hire KPMG involved a Department of Health and Human Services (HHS) panel that reviewed and ranked all technical proposals and qualifications by “predetermined evaluation criteria,” McAndrew said.
“Evaluation criteria in the solicitation included responsiveness to the audit design requirements in the HHS statement of work, as well as past performance on other compliance audit programs,” McAndrew said. “Negotiations were conducted, and an offer was made.”
KPMG LLP is an audit, tax, and advisory firm and is the United States member firm of KPMG International, according to its website. KPMG International’s member firms have 137,000 professionals, including more than 7,600 partners, in 144 countries.
Dom Nicastro is a contributing writer. He edits the Medical Records Briefings newsletter and manages the HIPAA Update Blog.
- Surgical Checklists Unused in 10% of Hospitals, CMS Data Shows
- Doctors Feel Pressure to Accept Risk-based Reimbursement
- Roundtable: To Arrest HAIs, Culture Trumps Campaigns
- Slideshow: Healthcare Leaders Name IT Spending Priorities
- 4 Tectonic Shifts Shaking Up Healthcare
- Wanted: Nurse PhDs
- A Fresh Look at End-of-Life Care
- 3 Insider Tips on Cutting Costs without Strangling Growth
- Heart Attack Patient Costs Skyrocket Beyond 30 Days
- 3 in 4 Patients Want E-mail Consultations