HIPAA Compliance and Training
Information Technology Audit & Security Reinforcement
Are your patients' electronic medical records safe? HIPAA compliance isn't just the law, it's good business. Whether you're a doctor, hospital, medical billing or other third-party medical service provider, if you aren't taking every precaution to safeguard that information, you could be jeopardizing protected health information (PHI) and patient financial information.
Be sure their data is safe by letting the technology experts at Computer Service Authority help you conduct an internal audit of your information security program. If we find any gaps in your system, we can help you fix it.
HIPAA Compliance Requirements
HIPAA requires that healthcare providers and other covered companies strengthen their safeguards for PHI, ensure electronic information is exchanged securely, and establish a way to safely operate between systems (both within their company and between third-party providers like medical billing services).
The penalties for a HIPAA violation are steep, with a possible prison sentence of up to 10 years and hundreds of thousands of dollars in criminal and civil fines per violation.(see the chart below for details).
Get your information technology audit now from the HIPAA technology experts at Computer Service Authority.
HIPAA Penalties Overview
Failure to comply with HIPAA rules and regulations can result in hefty fines and in some cases, criminal prosecution. Detailed information regarding HIPAA violations and enforcement is available here.
| HIPAA Violation | Minimum Penalty | Maximum Penalty |
|---|---|---|
| Individual did not know (and by exercising reasonable diligence would not have known) that he/she violated HIPAA | $100 per violation, with an annual maximum of $25,000 for repeat violations (Note: maximum that can be imposed by State Attorneys General regardless of the type of violation) | $50,000 per violation, with an annual maximum of $1.5 million |
| HIPAA violation due to reasonable cause and not due to willful neglect | $1,000 per violation, with an annual maximum of $100,000 for repeat violations | $50,000 per violation, with an annual maximum of $1.5 million |
| HIPAA violation due to willful neglect but violation is corrected within the required time period | $10,000 per violation, with an annual maximum of $250,000 for repeat violations | $50,000 per violation, with an annual maximum of $1.5 million |
| HIPAA violation is due to willful neglect and is not corrected | $50,000 per violation, with an annual maximum of $1.5 million | $50,000 per violation, with an annual maximum of $1.5 million |
HIPAA Resources
Listed below are some helpful resources regarding HIPAA, from the U.S. Department of Health & Human Services.
Summary of the HIPAA Privacy Rule
Summary of the HIPAA Security Rule
HIPAA Enforcement
Your business is built on critical data stored on your computer. If lost or stolen, replacing that data may be impossible and at the very least time-consuming. Don't wait until it's too late. Our experts specialize in disaster planning and data storage. We'll evaluate your data backup needs and recommend a practical strategy to prevent catastrophic data loss. If you've already lost important data, we have specialized data recovery tools.