This article incorporates activities that an organization can use to improve the policy process and ensure the development and implementation of effective policies. While we may think we have written HIPAA policies, remember that HIPAA is one set of requirements facing all organizations that work with information.
As privacy officer of a healthcare organization that includes about 12,000 employees in 14 hospitals and 30 clinics, Nancy Davis, MS, RHIA, CHPS, is a realist about one thing related to HIPAA compliance: Employees will make mistakes. They are human, after all.
