1. Build a foundation
MyHIPAA Guide’s Compliance Charter template sets the fundamental ethical principles for HIPAA compliance. The Charter:
- Defines the Compliance Officer (CO) role as that of creating and managing the compliance program
- Places responsibility for compliance on all in the organization
- Setting forth direct-line authority for the CO across the organization
- Protects the CO retaliation/personal liability
2. Take action
MyHIPAA Guide takes organizations through a 10-step compliance plan, and provides the resources for what’s needed for critical tasks such as:
- Risk assessment
- Policies and procedures
- Business associate agreements
- Privacy notices
- Staff training
- Breach reporting and investigating
3. Stay compliant
Ultimately, the Charter is carried out through an annual Work Plan that spreads responsibility and holds individuals responsible for assigned tasks.
4. Pay special attention to socail media abuses
MyHIPAA Guide has available:
- Social media guidelines (including posters)
- Online courses for staff training
- Webinars
- On-site training
- Whistle-blower web page for confidential/anonymous reporting of potential abuses