TMCnet News
Buck survey finds group health plan sponsors struggle to comply with HIPAA regulations, unprepared for an audit or investigationNEW YORK, Jan. 14, 2020 /PRNewswire/ -- Buck, an integrated HR and benefits consulting, technology, and administration services firm, today released the findings of its HIPAA Readiness Survey, which found that many group health plan sponsors are not in full compliance with HIPAA rules nor are they prepared for a HIPAA audit or investigation. Under the HIPAA rules, covered entities and business associates must not only have processes in place to safeguard protected health information, they must also periodically review the procedures and update or modify them as necessary. Buck's survey uncovered that one third of plan sponsors didn't know when a HIPAA risk or threat assessment was last performed, and an additional 10% stated their analysis was more than five years old. An essential component of HIPAA compliance is an up-to-date risk/threat assessment to identify key IT security weaknesses. "Strong governance is essential to protecting information," says Laurie DuChateau, U.S Compliance Consulting Practice Leader. "It's risky for group health plan sponsors to be unprepared for a HIPAA audit or investigation as penalties for non-compliance can amount to millions of dollars." The survey also found other gaps that need to be addressed: Only 39% of respondents had updated their privacy and security policies and procedures in the last year. In addition, documented policies and procedures were not adequately communicated ad therefore often not followed, and records of individual training completion had not been maintained. Key findings:
"HIPAA has always been a complex law," says DuChateau. "Over the last few years, the U.S. Health & Human Services' Office of Civil Rights has ramped up its investigations, resulting in some of the largest monetary settlements in HIPAA's history. Understanding and complying with the rules is the best way to prevent a breach and the only way to emerge successfully from a HIPAA audit." To download a copy of the report, click here. Methodology About Buck Media contact: Note: The majority (77.4%) of survey respondents identified as sponsors of group health plans. The balance of survey participants did not provide a response to this question. View original content to download multimedia:http://www.prnewswire.com/news-releases/buck-survey-finds-group-health-plan-sponsors-struggle-to-comply-with-hipaa-regulations-unprepared-for-an-audit-or-investigation-300986525.html SOURCE Buck |