Q A fax containing PHI is sent to an incorrect fax number. Did the covered entity (CE) or business associate (BA) violate HIPAA? Must the patient disclosure accounting record include this incident?
Undocumented policies and procedures are among the top five stumbling blocks to HIPAA compliance that Chris Apgar, CISSP, finds when he audits healthcare organizations.
Organizations have had their chance to weigh in on the proposed accounting of disclosures rule, and some larger ones don't exactly see it working as written. Here is what some organizations had to say.
The time for healthcare organizations to undertake a review of their operations is now-OCR anticipates that its long-awaited HIPAA compliance audit program will be under way this fall.
