Publication

New Compliance Challenge Preparing for OCR Audits

Lisa Shuman | October 2008

Many health care organizations have placedย Health Insurance Portability and Accountabilityย Act (HIPAA) privacyย under the complianceย officer. ย HIPAA security normally is found with informationย technology. In any case, whether the complianceย officer has any operational management of HIPAA orย not, he or she does have oversight responsibility to ensureย that his or her organization is in compliance withย current regulatory requirements. For many, this representsย a new and difficult challenge. The purpose of thisย article to assist meeting this challenge.

About the Author

Ms. Shuman assists health care organizations to develop, implement and evaluate their compliance programs and HIPAA privacy programs. Ms. Shuman specializes in our firmโ€™s HIPAA Privacy services, including leading privacy investigations, breach risk assessments, breach notification letters, breach reporting to the Office for Civil Rights and corrective actions plans. She specializes in serving as Interim Privacy Officer for large health care systems, managed care organizations, comprehensive cancer center and health care business associate.