Health Information Technologies and Processes

Crystal Ball Time...Auditing

  • 1.  Crystal Ball Time...Auditing

    Posted 08-12-2020 08:08
    In the course of studying for certification exams, the question of audits often comes up since auditing, as indicated by the Office of Inspector (OIG), is the one way the effectiveness (or not!) of a compliance program can be assessed.  So that being said, and many folks are dealing with HIPAA Privacy and Security compliance programs...the following question.

    What audit is there that you would like to see put in place within your facility?  ( popular audit is to assess whether the access to ePHI, such as through an EHR, is discontinued in a timely manner according to policy, once a workforce member leaves the organization (voluntarily or involuntarily).

    Offlist responses are fine.  If I do receive offlist responses, I'll summarize and post them later this week.

    Thanks to all!

    Frank Ruelas
    Compliance Professional
    Posted: 5:07 AM AZ time

  • 2.  RE: Crystal Ball Time...Auditing

    Posted 08-12-2020 09:52



    I would love to see how many providers are accessing records of patients they should not be.



  • 3.  RE: Crystal Ball Time...Auditing

    Posted 08-13-2020 08:04
    Hi - we are going to perform an audit to track response times to patient requests for access or copies of their records given the findings of Devan McGraw's report last year.  It was going to be on this year's workplan, but got moved to next year with the pandemic.  Got my wish for the type of audit I wished to perform.

    Lance Smith
    Privacy Officer

  • 4.  RE: Crystal Ball Time...Auditing

    Posted 08-18-2020 11:53
    I'd like to have ability to compare last names/addresses of patients to the names/addresses of employees who were in the chart.

    Deborah Gagne
    Him Director
    Garrett Regional Medical Center