The Department of Health and Human Services Office for Civil Rights released guidance on desk audits included in its new Phase 2 Audit Program. For a description of the Audit Program, see our prior article here.
HHS said that the Phase 2 Audit Program will include covered entities and business associates, and will consist of between 200 and 250 audits. Through the audits, HHS intends to identify industry best practices, discover risks and vulnerabilities, review HIPAA compliance and address problems before they result in breaches.
HHS released documents that are provided to covered entities undergoing an audit by HHS. These documents include a Question and Answer list, a summary of audit document requests, and webinar slides. The documents are helpful for all employers who wish to review their HIPAA compliance programs, even in advance of an audit. Click here for frequently asked questions and click here for guidance on selected audit inquiries.