Easy Guide to HIPAA Risk Assessments

Risk assessments are required under the Health Insurance and Accountability Act of 1996, better known as HIPAA. 


HIPAA is the federal statute that requires healthcare providers to safeguard patient identities, medical records and protected health information (“PHI”). It further requires organizations that handle PHI to regularly review the administrative, physical and technical safeguards they have in place. 


Basically, HIPAA took established confidentiality healthcare practices of physicians and healthcare providers to protect patients’ information and made it law. 


Risk assessments are a key requirement of complying with HIPAA. Covered entities must complete a HIPAA risk assessment to determine their risks, and protect their PHI from breaches and unauthorized access to protected information. There are many components of risk assessments, which can often seem burdensome on healthcare providers. 


Let Lori-Ann Rickard and Lauren Sullivan guide you and your company as you tackle the risk assessments required by HIPAA.