{"id":1326,"date":"2016-04-26T15:01:17","date_gmt":"2016-04-26T13:01:17","guid":{"rendered":"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-%e2%80%93-phase-2"},"modified":"2024-05-07T19:51:11","modified_gmt":"2024-05-07T17:51:11","slug":"department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2","status":"publish","type":"post","link":"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/","title":{"rendered":"Department of Health and Human Services Launches Long Awaited HIPAA Audit \u2013 Phase 2"},"content":{"rendered":"<p>Early last month, the Department of Health and Human Services Office for Civil Rights (OCR) officially launched Phase 2 of its <a href=\"https:\/\/en.wikipedia.org\/wiki\/Health_Insurance_Portability_and_Accountability_Act\" target=\"_blank\" rel=\"noopener\">HIPAA<\/a> Audit Program. Phase 2 is an extension of 2011\u2019s Pilot Program to review an entities adherence to HIPAA\u2019s Privacy, Security and Breach Notification rules. According to the OCR, the use of health information technology and continual expansion of said technology creates increased risk of healthcare violations, and exposes consumer privacy. Initially begun in 2011, the HHS OCR, in conjunction with the Health Information Technology for Economic and Clinical Health Act, (HITECH) implemented a program to assess the controls and processes of covered entities. With a narrow focus on only 115 covered entities, the OCR completed its initial round in December 2012. In its 2016 Phase 2 HIPAA Audit Program, OCR will review the policies and procedures adopted and employed by covered entities and their business associates to meet selected standards and implementation specifications of the Privacy, Security, and Breach Notification Rules. For this phase of the audit program, OCR is identifying pools of covered entities and business associates that represent a wide range of health care providers, health plans, health care clearinghouses and business associates. These audits will primarily be desk audits, although some on-site audits will be conducted. <\/p>\n<h2>How will the audit program work?<\/h2>\n<p> From the <a href=\"https:\/\/www.hhs.gov\/hipaa\/for-professionals\/compliance-enforcement\/audit\/index.html#who\" target=\"_blank\" rel=\"noopener\">HHS.Gov Site:<\/a> \u00abThe audit process will employ common audit techniques. Entities selected for an audit will be sent an email notification of their selection and will be asked to provide documents and other data in response to a document request letter. Audited entities will submit documents on-line via a new secure audit portal on OCR\u2019s website. There will be fewer in person visits during these Phase Two audits than in Phase One, but auditees should be prepared for a site visit when OCR deems it appropriate. Auditors will review documentation and then develop and share draft findings with the entity. Auditees will have the opportunity to respond to these draft findings; their written responses will be included in the final audit report. Audit reports generally describe how the audit was conducted, discuss any findings, and contain entity responses to the draft findings.\u00bb <\/p>\n<h2>How can the audits affect me?<\/h2>\n<p> If you are an organization concerned about remaining compliant with HIPAA and HITECH, ensure you are up to date on best practices from existing vendors. As a reminder, HIPAA violations can range from $100 to $50,000 per instance, depending on severity and level of neglect. An audit can be an eye opening experience for a number of organizations, and one that could come with a hefty price tag. <\/p>\n<h2>Concerned about faxing compliance?<\/h2>\n<p> Consult Retarus\u2019 HIPAA Compliance guide for Faxing Services to review the impact of non-compliance on organizations as well as strategies and best practices for remaining HIPAA compliant with cloud messaging technology. <a href=\"https:\/\/www.retarus.com\/industries\/retarus-cloud-messaging-services-for-healthcare\/\" target=\"_blank\" rel=\"noopener\">A guide can be requested through our website<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Early last month, the Department of Health and Human Services Office for Civil Rights (OCR) officially launched Phase 2 of its HIPAA Audit Program. Phase 2 is an extension of 2011\u2019s Pilot Program to review an entities adherence to HIPAA\u2019s Privacy, Security and Breach Notification rules. If you are an organization concerned about remaining compliant with HIPAA and HITECH, ensure you are up to date on best practices from existing vendors.<\/p>\n","protected":false},"author":16,"featured_media":1327,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[78,15],"tags":[],"dipi_cpt_category":[],"class_list":["post-1326","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry","category-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v23.9 (Yoast SEO v23.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Department of Health and Human Services Launches HIPAA Audit \u2013 Phase 2<\/title>\n<meta name=\"description\" content=\"If you are an organization concerned about remaining compliant with HIPAA and HITECH, ensure you are up to date on best practices from existing vendors.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Department of Health and Human Services Launches Long Awaited HIPAA Audit \u2013 Phase 2\" \/>\n<meta property=\"og:description\" content=\"If you are an organization concerned about remaining compliant with HIPAA and HITECH, ensure you are up to date on best practices from existing vendors.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Retarus Corporate Blog - ES\" \/>\n<meta property=\"article:published_time\" content=\"2016-04-26T13:01:17+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-07T17:51:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.retarus.com\/blog\/es\/wp-content\/uploads\/sites\/26\/2016\/04\/Business_07_680x384.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"680\" \/>\n\t<meta property=\"og:image:height\" content=\"384\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Stella Alvo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Stella Alvo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/\",\"url\":\"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/\",\"name\":\"Department of Health and Human Services Launches HIPAA Audit \u2013 Phase 2\",\"isPartOf\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/es\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.retarus.com\/blog\/es\/wp-content\/uploads\/sites\/26\/2016\/04\/Business_07_680x384.jpg\",\"datePublished\":\"2016-04-26T13:01:17+00:00\",\"dateModified\":\"2024-05-07T17:51:11+00:00\",\"author\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/es\/#\/schema\/person\/409e15438d24c33b4fd244f975c11337\"},\"description\":\"If you are an organization concerned about remaining compliant with HIPAA and HITECH, ensure you are up to date on best practices from existing vendors.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/#primaryimage\",\"url\":\"https:\/\/www.retarus.com\/blog\/es\/wp-content\/uploads\/sites\/26\/2016\/04\/Business_07_680x384.jpg\",\"contentUrl\":\"https:\/\/www.retarus.com\/blog\/es\/wp-content\/uploads\/sites\/26\/2016\/04\/Business_07_680x384.jpg\",\"width\":680,\"height\":384},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.retarus.com\/blog\/es\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Department of Health and Human Services Launches Long Awaited HIPAA Audit \u2013 Phase 2\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.retarus.com\/blog\/es\/#website\",\"url\":\"https:\/\/www.retarus.com\/blog\/es\/\",\"name\":\"Retarus Corporate Blog - ES\",\"description\":\"Siempre al d\u00eda\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.retarus.com\/blog\/es\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.retarus.com\/blog\/es\/#\/schema\/person\/409e15438d24c33b4fd244f975c11337\",\"name\":\"Stella Alvo\",\"url\":\"https:\/\/www.retarus.com\/blog\/es\/author\/stellaa\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Department of Health and Human Services Launches HIPAA Audit \u2013 Phase 2","description":"If you are an organization concerned about remaining compliant with HIPAA and HITECH, ensure you are up to date on best practices from existing vendors.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/","og_locale":"es_ES","og_type":"article","og_title":"Department of Health and Human Services Launches Long Awaited HIPAA Audit \u2013 Phase 2","og_description":"If you are an organization concerned about remaining compliant with HIPAA and HITECH, ensure you are up to date on best practices from existing vendors.","og_url":"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/","og_site_name":"Retarus Corporate Blog - ES","article_published_time":"2016-04-26T13:01:17+00:00","article_modified_time":"2024-05-07T17:51:11+00:00","og_image":[{"width":680,"height":384,"url":"https:\/\/www.retarus.com\/blog\/es\/wp-content\/uploads\/sites\/26\/2016\/04\/Business_07_680x384.jpg","type":"image\/jpeg"}],"author":"Stella Alvo","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"Stella Alvo","Tiempo de lectura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/","url":"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/","name":"Department of Health and Human Services Launches HIPAA Audit \u2013 Phase 2","isPartOf":{"@id":"https:\/\/www.retarus.com\/blog\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/#primaryimage"},"image":{"@id":"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.retarus.com\/blog\/es\/wp-content\/uploads\/sites\/26\/2016\/04\/Business_07_680x384.jpg","datePublished":"2016-04-26T13:01:17+00:00","dateModified":"2024-05-07T17:51:11+00:00","author":{"@id":"https:\/\/www.retarus.com\/blog\/es\/#\/schema\/person\/409e15438d24c33b4fd244f975c11337"},"description":"If you are an organization concerned about remaining compliant with HIPAA and HITECH, ensure you are up to date on best practices from existing vendors.","breadcrumb":{"@id":"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/#primaryimage","url":"https:\/\/www.retarus.com\/blog\/es\/wp-content\/uploads\/sites\/26\/2016\/04\/Business_07_680x384.jpg","contentUrl":"https:\/\/www.retarus.com\/blog\/es\/wp-content\/uploads\/sites\/26\/2016\/04\/Business_07_680x384.jpg","width":680,"height":384},{"@type":"BreadcrumbList","@id":"https:\/\/www.retarus.com\/blog\/es\/department-of-health-and-human-services-launches-long-awaited-hipaa-audit-phase-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.retarus.com\/blog\/es\/"},{"@type":"ListItem","position":2,"name":"Department of Health and Human Services Launches Long Awaited HIPAA Audit \u2013 Phase 2"}]},{"@type":"WebSite","@id":"https:\/\/www.retarus.com\/blog\/es\/#website","url":"https:\/\/www.retarus.com\/blog\/es\/","name":"Retarus Corporate Blog - ES","description":"Siempre al d\u00eda","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.retarus.com\/blog\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/www.retarus.com\/blog\/es\/#\/schema\/person\/409e15438d24c33b4fd244f975c11337","name":"Stella Alvo","url":"https:\/\/www.retarus.com\/blog\/es\/author\/stellaa\/"}]}},"_links":{"self":[{"href":"https:\/\/www.retarus.com\/blog\/es\/wp-json\/wp\/v2\/posts\/1326"}],"collection":[{"href":"https:\/\/www.retarus.com\/blog\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.retarus.com\/blog\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/es\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/es\/wp-json\/wp\/v2\/comments?post=1326"}],"version-history":[{"count":3,"href":"https:\/\/www.retarus.com\/blog\/es\/wp-json\/wp\/v2\/posts\/1326\/revisions"}],"predecessor-version":[{"id":8832,"href":"https:\/\/www.retarus.com\/blog\/es\/wp-json\/wp\/v2\/posts\/1326\/revisions\/8832"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/es\/wp-json\/wp\/v2\/media\/1327"}],"wp:attachment":[{"href":"https:\/\/www.retarus.com\/blog\/es\/wp-json\/wp\/v2\/media?parent=1326"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/es\/wp-json\/wp\/v2\/categories?post=1326"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/es\/wp-json\/wp\/v2\/tags?post=1326"},{"taxonomy":"dipi_cpt_category","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/es\/wp-json\/wp\/v2\/dipi_cpt_category?post=1326"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}