HIPPA violation fines have increased the new numbers show that depending on the violation and what TIER you are in 1-4, you could be on the hook for anywhere from 25K to 1.5MM per category per year in max fines. Meaning that if you are found to be out of compliance and negligent in multiple categories this number goes up. Currently cyber-attacks are rampant and the biggest money maker is PHI. PHI on the black market is like gold. If you are out of compliance and it causes a breach, and your company is found negligent you will be on the hook for a fine and possibly a lawsuit. The list we put together below is a great starter tool to assess your companies current state of compliance.
  1. Is your webpage hosted by a site that is HIPPA Compliant?
  • Does your sit have HIPPA compliance option
  • If not change your host
  1. Is your site protected by an SSL Certificate?
  • If not get one in place
  1. Are all forms of web communication encrypted, to include secure all web forms?
  • Contact forms, chatbots, or appointment services through your site need to be encrypted
  1. Do you insist on Business Associate Contract?
  • Bill collector going after delinquent payments must follow the same rules regarding protected health information as the nurse who takes a patient’s blood pressure
  1. Have you restricted Access to PHI?
  • The least privileges possible. Not everyone in the office needs access to PHI, and the same goes for online access
  1. Have you developed and implemented systems for accepting, storing, transmitting, and deleting PHI?
  • When collecting PHI on unsecured tablets and leaving them in the office, this is a potential violation. There are so many ways to handle PHI. The key is to find a HIPAA compliant system that works for your staff that is well known and understood.
  1. Do you provide HIPPA Compliance training to everyone with access to PHI?
  • Make sure all employees know and understand how to carry out HIPPA compliance standards
HIPPA compliance has so many different aspects to it that it is extremely important to make sure that you and your staff are up to date on. The list above is only the tip of the iceberg when it comes to HIPPA compliance. Reaching out to a professional firm that can specialize in HIPPA compliance is a great way to ensure your staff is operating within the set guidelines. Patient privacy rights and protected health information breaches can lead to an investigation. Below is the HHS.gov HIPPA Complaint Process. It outlines the start to finish the complaint to investigation to eventually resolution. Hiring a outside consulting firm will give you an unbiased look at your assets and how well you have protected them.
HIPAA Complaint Process

Free Vulnerability Scan

Worried about your team’s credentials maybe on the dark web? Sign up now for a free vulnerability scan of your web facing application!