HIPAA Breaches & Desk Audits

What is a breach?
In simple words, the loss of patient protected health information, either printed or electronic.

How common are breaches within pharmacies?
There are two types of pharmacies and pharmacy owners,
The first are the ones who know they have had a breach
The later are the ones who have had a breach and don’t know about it

How can I have a breach and not know about it?
Simple, has your pharmacy clerk ever given a patient another patient’s medication?

That is a breach

Can you give me examples of breaches?
Pharmacy is robbed and the will call bin is stolen
Pharmacy is robbed and the server is stolen
Staff pharmacist has a laptop stolen
Delivery driver has their vehicle stolen which is full of prescriptions to be delivered
Billing manager has a jump drive with patient files for billing to work at home and loses it on the bus

What do I do when a breach occurs?
First, don’t panic
Get the facts
Complete a Potential Breach Evaluation and a Risk Assessment
Determine whether the breach is reportable or non-reportable to HHS/OCR
Document everything 

What are OCR Desk Audits
Tested in 2016
Launched on January 1, 2017
Notification via U.S. Mail and Email
Also conducting no notice on-site inspections

What is the OCR asking for?
Notice of Privacy Practices (date must be after 07/01/2013)
Risk Analysis
Risk Management Plan
Disaster Recovery Plan/Contingency Plan
Annual Privacy and Security Assessments
Random Policies and Procedures

On-Site Inspections
Same as above, but in person
First question is to the person at your counter, normally your clerk
Can I have a copy of your Notice of Privacy Practice?
They have to know the answer and provide the NOPP

Penalties for Non-compliance
Fines up to 1.5 Million Dollars

 Is there help available to pharmacies?
Yes, but you get what you pay for
You can buy a set of policies and procedures, but if you have breach, especially a reportable breach:

Will the consultant stay with you when you need them the most?
Will they charge you extra?
Will they provide the correct advice?

How do you know how to pick a consultant?
Ask your peers
Ask hard questions about how they have handled client breaches and inspections
Do you get detailed answers from the consultant?
Do you referrals from multiple people?

CONTACT: Office:  724-357-8380 

Website:  www.rjhedges.com

HIPAA Breaches &amp; Desk Audits
What is a breach?
<ul>
<li>In simple words, the loss of patient protected health information, either printed or electronic.</li>
</ul>
How common are breaches within pharmacies?
<ul>
<li>There are two types of pharmacies and pharmacy owners,</li>
<li>The first are the ones who know they have had a breach</li>
<li>The later are the ones who have had a breach and don&rsquo;t know about it</li>
</ul>
How can I have a breach and not know about it?
<ul>
<li>Simple, has your pharmacy clerk ever given a patient another patient&rsquo;s medication?
<ul>
<li>That is a breach</li>
</ul>
</li>
</ul>
Can you give me examples of breaches?
<ul>
<li>Pharmacy is robbed and the will call bin is stolen</li>
<li>Pharmacy is robbed and the server is stolen</li>
<li>Staff pharmacist has a laptop stolen</li>
<li>Delivery driver has their vehicle stolen which is full of prescriptions to be delivered</li>
<li>Billing manager has a jump drive with patient files for billing to work at home and loses it on the bus</li>
</ul>
What do I do when a breach occurs?
<ul>
<li>First, don&rsquo;t panic</li>
<li>Get the facts</li>
<li>Complete a Potential Breach Evaluation and a Risk Assessment</li>
<li>Determine whether the breach is reportable or non-reportable to HHS/OCR</li>
<li>Document everything&nbsp;</li>
</ul>
What are OCR Desk Audits
<ul>
<li>Tested in 2016</li>
<li>Launched on January 1, 2017</li>
<li>Notification via U.S. Mail and Email</li>
<li>Also conducting no notice on-site inspections</li>
</ul>
What is the OCR asking for?
<ol>
<li>Notice of Privacy Practices (date must be after 07/01/2013)</li>
<li>Risk Analysis</li>
<li>Risk Management Plan</li>
<li>Disaster Recovery Plan/Contingency Plan</li>
<li>Annual Privacy and Security Assessments</li>
<li>Random Policies and Procedures</li>
</ol>
On-Site Inspections
<ul>
<li>Same as above, but in person</li>
<li>First question is to the person at your counter, normally your clerk</li>
<li>Can I have a copy of your Notice of Privacy Practice?</li>
<li>They have to know the answer and provide the NOPP</li>
</ul>
Penalties for Non-compliance
<ul>
<li>Fines up to 1.5 Million Dollars</li>
</ul>
&nbsp;Is there help available to pharmacies?
<ul>
<li>Yes, but you get what you pay for</li>
<li>You can buy a set of policies and procedures, but if you have breach, especially a reportable breach:
<ul>
<li>Will the consultant stay with you when you need them the most?</li>
<li>Will they charge you extra?</li>
<li>Will they provide the correct advice?</li>
</ul>
</li>
</ul>
How do you know how to pick a consultant?
<ul>
<li>Ask your peers</li>
<li>Ask hard questions about how they have handled client breaches and inspections</li>
<li>Do you get detailed answers from the consultant?</li>
<li>Do you referrals from multiple people?</li>
</ul>
CONTACT:&nbsp;Office: &nbsp;<a href="callto:724-357-8380">724-357-8380</a>&nbsp;
Website: &nbsp;<a href="http://www.rjhedges.com/">www.rjhedges.com</a>

In March of 2009, Todd S. Eury, launched the Pharmacy Podcast Show. Over the years, the Pharmacy Podcast has accumulated over 75,000+ listeners and subscribers and is the most popular and downloaded podcast about the Pharmacy Industry.

The Pharmacy Podcast Show transformed into the Pharmacy Podcast Network (PPN) in 2014 and will continue to collect the thought leading interviews with some of the most brilliant minds in Pharmacy with over 30 co-hosts. The PPN is a Digital Health Publication and Content Developing partner to the Pharmaceutical industry focusing on Specialty medications, pharmacy business supportive technologies, and industry trends.

The PPN is the world's largest network of podcasts dedicated to the pharmacy professional and industry insiders leading with our hosts interviewing dynamic people in the pharmacy industry making a difference for our profession, customers, and patients.

The definition of “Innovation” is: A new method, idea, product, or process. Processing, implementing, operating, or designing beyond the status-quo. Pharmacists are the HUB of Healthcare & the PPN is the Pharmacist's biggest fan. 

In March of 2009, Todd S. Eury, launched the Pharmacy Podcast Show. Over the years, the Pharmacy Podcast has accumulated over 75,000+ listeners and subscribers and is the most popular and downloaded podcast about the Pharmacy Industry.
The Pharmacy Podcast Show transformed into the Pharmacy Podcast Network (PPN) in 2014 and will continue to collect the thought leading interviews with some of the most brilliant minds in Pharmacy with over 30 co-hosts. The PPN is a Digital Health Publication and Content Developing partner to the Pharmaceutical industry focusing on Specialty medications, pharmacy business supportive technologies, and industry trends.
The PPN is the world's largest network of podcasts dedicated to the pharmacy professional and industry insiders leading with our hosts interviewing dynamic people in the pharmacy industry making a difference for our profession, customers, and patients.
The definition of &ldquo;Innovation&rdquo; is: A new method, idea, product, or process. Processing, implementing, operating, or designing beyond the status-quo. Pharmacists are the HUB of Healthcare &amp; the PPN is the Pharmacist's biggest fan.&nbsp;

Pharmacy Podcast Network

The Pharmacy Podcast Network is ranked as the number one podcast in healthcare dedicated to the Business of Pharmacy and TOP 25 Podcasts in U.S. Business News. The most influential voices in the pharmacy industry are published on the Pharmacy Podcast Network (PPN). The PPN is the leading audio authority of the pharmaceutical & pharmacy industry with more than 30 hosts, 1,200+ episodes, supporting more than 25+ pharmacy industry associations, with more than 80,000 listeners world wide. 

The PPN is an Audio Branding & Public Relations Communications company dedicated to the Pharmaceutical industry focusing on Community, Long-term care, Health System, Specialty, pharmacy business supportive technologies, and industry trends. 

Pharmacy Podcast™ is a registered trademark

The Pharmacy Podcast Network is ranked as the number one podcast in healthcare dedicated to the Business of Pharmacy and TOP 25 Podcasts in U.S. Business News. The most influential voices in the pharmacy industry are published on the Pharmacy Podcast Network (PPN). The PPN is the leading audio authority of the pharmaceutical &amp; pharmacy industry with more than 30 hosts, 1,200+ episodes, supporting more than 25+ pharmacy industry associations, with more than 80,000 listeners world wide.&nbsp;
The PPN is an Audio Branding &amp; Public Relations Communications company dedicated to the Pharmaceutical industry focusing on Community, Long-term care, Health System, Specialty, pharmacy business supportive technologies, and industry trends.&nbsp;
Pharmacy Podcast&trade; is a registered trademark

HIPAA Breaches & Desk Audits What is a breach?  In simple words, the loss of patient protected health information, either printed or electronic.  How common are breaches within pharmacies?  There are two types of pharmacies and pharmacy owners,...

Advertisement