The following items in our HIPAA Compliance Online Assessment has been identified by HHS OCR as elements of an effective compliance program.

These items are required for covered entities and business associates. Fulfillment of these measures gives confidence that your organization is protected from financial and legal liabilities.

Please check off as applicable to self-evaluate your practice or organization. Enter your contact details at the bottom and we will then reach out to further assist you.

HIPAA Compliance Self-Assessment

(1) Have you conducted these required six (6) annual assessments?

(2) Have you done the following?

Uncovered gaps in the audits above Documented all deficiencies

(3) Have you created remediation plans to address deficiencies in all six (6) audits?

Yes, I have created and fully-documented all remediation plans in writing I update and review these remediation plans annually The annual remediation plans are retained in our records for six years

(4) About your organizational staff

Have all of your staff members undergone annual HIPAA training? Do you have documentation of such training? Is there a staff designated as Privacy/Security/HIPAA-Compliance officer?

(5) HIPAA-Compliant Company policies

All staff members have read and legally attested to the Policies and Procedures Are all attestations documented? Are all annual reviews of policies and procedures documented?

(6) Vendors and Business Associates

Do you have business agreements with all vendors? Have you assessed if your vendors are HIPAA-compliant? Are you reviewing your vendor agreements annually? Do you have Confidentiality Agreements with non-Business Associate vendors?

(7) Do you have incident or breach response in place?

Do you have incident tracking and management in place? Are you able to provide the required reporting of minor and major breaches? Do your staff have the ability to report incidents anonymously?

Enter your email and other details to get HIPAA compliancy assessment

Email*

Phone

Message

Tip: If audited, you must provide all documentation for the past six (6) years to the auditors.

Please note that the checklist above are general questions only for you to determine the quality of your HIPAA compliance and does not qualify as legal advice. Successfully completing this checklist does not mean that you or your organization are HIPAA compliant.

At Troinet, we offer support at every step to ensure that you satisfy necessary HIPAA compliance requirements. Schedule your HIPAA consultation today at 718-761-2780 or engage@troinet.com.