HIPAA compliance is non-negotiable in medical billing. Use this checklist to confirm your operation is covered.
Administrative Safeguards
- Designated privacy officer and security officer
- Written policies and procedures
- Workforce training on at least an annual basis
- BAAs in place with all subcontractors
Physical Safeguards
- Access controls on facilities housing PHI
- Workstation security policies
- Device and media controls
Technical Safeguards
- Access controls (unique user IDs, automatic logoff)
- Audit logs and monitoring
- Encryption in transit and at rest
- MFA on all systems handling PHI
Breach Response
- Documented breach response procedures
- Cyber insurance with healthcare PHI coverage
- Annual tabletop exercises
Talk to us for help with HIPAA program design.