In an effort to finalize a HIPAA audit program, the HHS Office for Civil Rights (OCR) is planning to send “pre-audit” surveys to up to 1,200 randomly selected organizations. The information collected in the surveys will be used to help OCR develop the audit program.
OCR intends to distribute surveys to approximately 800 covered entities and 400 business associates. The surveys will ask respondents for information including recent number of patients and insured lives, use of electronic information, revenue, and business location. OCR will use this information to evaluate respondents’ size, complexity, and readiness for an audit. Notably, receipt of a survey does not suggest that an organization will be subject to an audit.
OCR is currently accepting comments on its use of the surveys. It has not yet set a date for sending them out.