If your healthcare organization thinks distributing a Notice of Privacy Practices (NPP) form, ensuring patients acknowledge receiving it, and maintaining those acknowledgments is a burden, the government may agree with you.
Semantics often gets in the way when it comes to HIPAA Security Rule requirements—and the results can be costly mistakes for your organization in terms of wasted resources, not to mention not satisfying OCR. It’s time for your organization to get a grip on what exact security measures it’s performing.