The Three Major Components of HIPAA
Before HIPAA was introduced, there were no standard security standards in place for protecting patient health information. The regulations set national standards for healthcare entities and anyone who transmits that information, including employees working on behalf of the covered entity. This standardized method for recording and exchanging data helps facilitate the process of paying insurance claims, answering eligibility questions and other administrative activities.
HIPAA covers any data that can be used to identify a person, from an MRI scan to blood test results. This data is considered protected health information (PHI) and any equipment that carries or stores this data is subject to HIPAA guidelines, which includes personal computers, internal hard drives, USB devices and smartphones.
The right to access is another key component of HIPAA and the law states that a patient or their representative can request a copy of their PHI at any time. This can be an electronic file or a paper copy, and the covered entity must verify the individual’s identity to ensure that they are actually who they say they are.
Covered entities are also responsible for having a contingency plan in place in case of a breach. This should include a documented risk assessment, testing procedures and a detailed disaster recovery strategy. Additionally, covered entities must conduct regular audits of their operations to identify any potential security violations. Policies and procedures should include the scope, frequency and methods of audits, as well as instructions for addressing and responding to any violations found during or as a result of an internal audit.
SITES WE SUPPORT
Check Direct Mail API – Wix









