HIPAA Compliance Guide

Regulatory compliance can be daunting for independent healthcare providers. These SMBs lack the resources to dedicate a staff member to IT, never mind monitor their HIPAA compliance efforts. Security consultants and value-added resellers (VARs) can help new medical offices implement risk analysis and risk management processes, and educate their medical customers during product sales.

We've designed this HIPAA Compliance Guide to help VARs and consultants who are developing their HIPAA expertise to take advantage of these business opportunities. You'll find resources that will help you become acquainted

The Enforcers It is a fact (written in the law) that enforcement of the HIPAA Administrative Simplification rules is complaint-driven only – and at least for the foreseeable future. Privacy rule complaints go to the U.S. Department's Health and Human Services' (HHS) Office for Civil Rights. The OCR handles civil penalties and refers potential criminal complaints to the Department of Justice. All other rules under Administrative Simplification, including the security rule, will be enforced by HHS' Centers for Medicare and Medicaid Services (CMS) Office of HIPAA Standards. This is true of all "covered entities" large and small. There is no government agency or other body that officially audits proactively for HIPAA compliance. – Kate Borten for SearchSecurity.com

with HIPAA's requirements as well as tools for compliance.