[img src=”/wp-content/uploads/sites/2/2018/07/blog-img-HIPAA-Compliance.jpg” class=”aligncenter”]
Summer is winding down and open enrollment is right around the corner. Is it time for you to think about HIPAA compliance?
Many business owners and decision-makers believe that HIPAA belongs to the world of doctor’s offices and insurance companies, but it’s a little more complicated. HIPAA applies to covered entities and their business associates. Covered entities include health plans and certain healthcare providers, the groups that immediately come to mind when you think of healthcare. Business associates are a much broader group, and can encompass entities like third party claims processing administrators, and accounting or legal firms serving healthcare providers.
Do HIPAA regulations apply to your business? There are ways in which you may find yourself working with protected information.
Some common means through which companies come into contact with HIPAA protected data include:
- [icon type=”angle-double-right” class=”fa fa-li accent”]Health information in Worker’s Compensation claims
- [icon type=”angle-double-right” class=”fa fa-li accent”]Data collected as part of employee wellness programs, like employee physicals
- [icon type=”angle-double-right” class=”fa fa-li accent”]Information collected via an employee’s Flexible Spending Account (FSA)
- [icon type=”angle-double-right” class=”fa fa-li accent”]Self-insured health plans
Some companies are choosing to follow HIPAA regulations even if they are not covered entities or business associates. Why would they do that? Well, if you collect any health information, your employees and staff may expect you to follow HIPAA compliant practices, even if you are not technically required to. For example, the popular wearable technology company Fitbit gains a competitive edge through following HIPAA compliant practices even if it is not a covered entity. Today, most employers possess some kind of employee health information and consumers and employees expect assurances that their information is being handled properly. Therefore, for some companies, it simply makes good business sense to follow HIPAA guidelines.
What kind of health information are you collecting and how can you keep it secure? For many businesses, HIPAA compliance begins, and often fails, with IT. That’s because cybersecurity is a major component to keeping your business HIPAA compliant. From proper storage to secure messaging, you want to make sure you are taking the necessary steps to remain HIPAA compliant. From an IT standpoint, some options you want to explore include:
- [icon type=”angle-double-right” class=”fa fa-li accent”]Security Risk Assessment
- [icon type=”angle-double-right” class=”fa fa-li accent”]Disaster Recovery Planning
- [icon type=”angle-double-right” class=”fa fa-li accent”]Secure Messaging
- [icon type=”angle-double-right” class=”fa fa-li accent”]Cloud Storage
Having the right IT provider is one of the best ways to protect your business and ensure you remain up-to-date with any technology-related compliance requirements. Even if you do not have current compliance concerns, it may be time to assess your cybersecurity practices.
Compliance and IT can be convoluted and overwhelming to navigate. That’s why Uprite Services is here to help. We are IT experts who remain up-to-date on the latest compliance regulations. If you think HIPAA might be a concern for your business, or even if you simply want to explore your IT options, call Uprite Services. Our team of IT experts can help you identify compliance holes in your current IT infrastructure. Strong IT practices are crucial for the overall health of your business. We are here to help with any IT questions you might have. Contact Uprite Services today!
HIPAA Beyond the Doctor’s Office: What Owners Ask
Does HIPAA really reach a business that isn’t a medical practice?
It can, because HIPAA applies to covered entities and their business associates, not just doctors’ offices and insurers. Covered entities include health plans and certain healthcare providers. Business associates are a much broader group. They can include third party claims processing administrators, plus accounting or legal firms serving healthcare providers.
How would an ordinary employer end up holding protected health data?
Most employers possess some kind of employee health information, often through routine HR programs. Workers’ compensation claims count. So does data collected as part of employee wellness programs, like employee physicals. Flexible Spending Account information and self-insured health plans make the list too.
If we aren’t required to follow HIPAA, why would anyone choose to?
Employees and consumers expect their health information to be handled properly, even if you are not technically required to follow HIPAA. If you collect any health information, your staff may expect HIPAA compliant practices from you. For some companies, it simply makes good business sense. Trust counts.
Where does IT come into HIPAA compliance?
For many businesses, compliance begins, and often fails, with IT. Cybersecurity is a major component. From proper storage to secure messaging, you want to take every necessary step to stay compliant. Options to explore include a security risk assessment, disaster recovery planning, secure messaging, and cloud storage, and having the right IT provider is one of the best ways to protect your business and stay current on technology-related compliance requirements.
Who can help us find our compliance gaps?
A knowledgeable IT provider can identify compliance holes in your current IT infrastructure. Start there. Even without any current compliance concerns, it may be time to assess your cybersecurity practices, because compliance and IT can be convoluted and overwhelming to navigate, and strong IT practices are crucial for the overall health of your business. Uprite Services can help.
