Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

What is required to become HIPAA Compliant?

Do I need to take a test or do I just need to follow a certain set of guidelines?

EDIT: Just to provide my background. I am a small IT Firm and we would like to expand into the medical field and work with all the smaller medical places.

share|improve this question

4 Answers 4

HIPPA isn't a certification, it is a set of regulations for proper handling of personal health information. The requirements vary based on what your role is and what data you handle. I would recommend visiting the Health Information Privacy section of the Health & Human Services site for more info.

It also might not hurt to hire someone to evaluate your compliance if you are still confused about it as it is a legal requirement for handling certain types of health information.

share|improve this answer

The Health Insurance Portability and Accountability Act better known as HIPAA, has been called to live by the government to protect patient's private information. HIPAA is aimed at healthcare professionals and staff who have access to patient information. HIPAA certification is a certification designed by private firms accompanied by training and testing. HIPAA certification is not yet officially approved by the government.

There are a set of tests you need to take to get this certificate from one of the private firms which issue HIPPA certificates. There are three levels:

  • Certified HIPAA Professional (how to behave as professional under the HIPPA regulations)
  • Certified HIPAA Security Specialist (how to make your organisation compliant)
  • Certified HIPAA Administrator (aimed at administrative personnel and nurses)

Each level has it's own training and set of goals you need to achieve.

share|improve this answer
    
The edit to the OP's question means that this answer is no longer helpful. OP does not want to become personally certified, he wants his business to be HIPAA compliant. –  schroeder Jul 4 '13 at 17:29

Have you tried a Google search or logging into hhs.gov?

They even have a handy checklists.

share|improve this answer
    
The checklist is nice. Thank you. –  JadedCore Mar 7 at 20:27

There is a great deal to becoming HIPAA compliant if you are a small IT firm. We are currently helping several IT companies become compliant and make Medical their vertical. We even give them ideas and material for marketing.

It isn't something to take lightly, however. There is a lot involved in becoming compliant.

Here are a couple of relevant articles I have written on the subject. Feel free to review other articles on the blog directed specifically at small providers and small businesses that support them. Contact me there if you want more info.

What is HIPAA and Why Do We Need It

Omnibus Final Rule Quick Overview

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.