HIPAA compliance readiness assessment: a case study.
Centura Health, a faith-based, not-for-profit IDS headquartered in Denver, Colorado, recently undertook a rapid assessment to determine its readiness to comply with the standards mandated by the Health Insurance Portability and Accountability Act (HIPAA) of 1996. The assessment process consisted of a business-impact assessment, compilation of results, a gap analysis, and a preliminary business case. The business-impact assessment involved a series of interviews. For the business case, results of the business-impact assessment were compared with the related HIPAA standard to determine the current level of compliance and develop an action plan, for approval by the project steering committee, to correct deficiencies. The HIPAA readiness assessment uncovered numerous areas in which Centura needed to implement changes, particularly with respect to ensuring the security and privacy of patients' paper records.
Callas
E
E
Centura Health, Englewood, Colorado, USA. elainecallas@centura.org
Brockmeier
K
K
D003120:Colorado; D016494:Computer Security; D003219:Confidentiality; D019033:Delivery of Health Care, Integrated / Q000331:legislation & jurisprudence / Q000592:standards*; D005376:Financial Management / Q000331:legislation & jurisprudence / Q000592:standards*; D019983:Guideline Adherence / Q000331:legislation & jurisprudence*; D020408:Health Insurance Portability and Accountability Act; D019451:Information Management / Q000331:legislation & jurisprudence / Q000592:standards*; D007407:Interviews as Topic; D008330:Management Audit; D019982:Organizational Case Studies; D009939:Organizations, Nonprofit; D014481:United States