simpl.
تسجيل الدخول
امتثال منشآت الرعاية الصحية 15 بند

HIPAA Privacy & Security Rule Compliance Audit

قائمة التحقق هذه باللغة الإنجليزية.

Compliance audit of protected health information (PHI) privacy and security safeguards for a covered entity under the HIPAA Privacy, Security, and Breach Notification Rules.

HIPAA Privacy Rule 45 CFR 164 Subpart EHIPAA Security Rule 45 CFR 164 Subpart CHITECH Breach Notification

PDF أو Word مجانًا · أدخل بريدك الإلكتروني للتنزيل.

Privacy Rule - Notice & Uses

  • Is a Notice of Privacy Practices provided to patients and posted/available? *
  • Are uses and disclosures of PHI limited to the minimum necessary for the purpose? *
  • Are authorizations obtained for uses/disclosures not otherwise permitted (e.g., marketing, sale of PHI)? *
  • Are patients able to exercise access, amendment, and accounting-of-disclosures rights? *

Administrative Safeguards

  • Has a security risk analysis of ePHI been conducted and documented, and is it periodically updated? *
  • Is a designated Privacy Officer and Security Official assigned? *
  • Is workforce security awareness and HIPAA training conducted and documented? *
  • Are Business Associate Agreements in place with vendors that handle PHI? *

Technical & Physical Safeguards

  • Is access to ePHI controlled with unique user IDs and role-based access? *
  • Is ePHI encrypted at rest and in transit where reasonable and appropriate? *
  • Are audit controls in place to record and examine access to systems containing ePHI? *
  • Are physical safeguards (facility access, workstation security, device/media controls) implemented? *

Breach Notification & Incident Response

  • Is there a documented process to identify, respond to, and mitigate security incidents? *
  • Are breaches of unsecured PHI assessed and reported to individuals and HHS within required timeframes? *
  • Is a contingency plan (data backup, disaster recovery, emergency mode operation) established and tested? *

نزّل قائمة تحقق HIPAA Privacy & Security Rule Compliance Audit كاملة

احصل عليها مجانًا بصيغة PDF أنيقة قابلة للطباعة أو مستند Word قابل للتعديل.