HIPAA Initiatives:

1. Full time Compliance Officer designated for policy implementation, staff training and monitoring associates. 
2. Update latest HIPAA guidelines. 
3. Client information access is restricted to the team, which is handling the client’s transaction. 
4. Accessibility to C-drive and A-drive is denied. 
5. PC lockup path. 
6. Security officer designated for policy implementation, security of systems and PHI. 
7. Paper less process which means no PHI is taken printout. 
8. Regular audit of compliance program and formulation of corrective plans to address any violation of compliance. 
HIPAA Training:

1. Contacting awareness programs for all employees. 
2. Ongoing training and testing programs link HIPAA education to staff rewards. 
3. HIPAA resource directory to update employees on regulations, news and events. 
PRIVACY:

1. Every employee signs confidentiality agreement with severe penalties for HIPAA violations 
2. Access to applications/databases defined on ‘need to know’ and ‘minimum necessary’ basis. 
3. HIPAA compliant procedures under implementation in risk areas like: 
·    Data processing 
·    Fax and email communication to external agencies 
·    Information disclosure to payors, patients, family members and other storage, retrieval and/or disposal of reports.