| HIPAA Document Management with KnowledgeTree |
|
This document explains how medical practitioners and healthcare entities such as doctor's offices, clinics, hospitals, HMOs and pharmacies can utilize document management software such as KnowledgeTree to achieve compliance with HIPAA (Health Insurance Portability and Accountability Act).
HIPAA Consists of Three Parts
Who is Required to Comply with HIPAA? HIPAA compliance is required of all healthcare providers, payers and clearinghouses. Providers include hospitals, clinics, nursing homes, private practice physicians, dentists and suppliers. Payers include group health plans, health insurance insurers, health maintenance organizations (HMOs), Medicare and Medicaid, and government healthcare programs. Clearinghouses include billing service providers, repricing companies and value-added networks. In short, all healthcare organizations in the United States need to develop a HIPAA strategy. HIPAA places increasing pressure on organizations to store and appropriately manage electronic documents and other types of content. HIPAA requires a wide range of healthcare documents to be kept for specified periods and also imposes strict data disposal processes. It also establishes restrictions for access to patient documents and information. Implementing HIPAA Step one toward HIPAA compliance for healthcare is a thorough risk assessment, followed by the creation of a detailed action plan, implementation and administration of the plan, and an ongoing audit. You will most likely need to perform separate assessments for your business, transactions and security. Each assessment must include policy, procedure and practice evaluations. You must document these measures up to and beyond specific deadlines, and audits will cover policy and procedure. There is no such thing as a HIPAA compliant document management software or hardware (despite the claims of some companies). To be compliant organizations must satisfy the intent of the law. They must have the mechanism in place that guarantees safe electronic storage, access and transmission of patient records. It is organizations, not technology, that must be HIPAA compliant. However technology can be used to help the organization in it's efforts to be HIPAA compliant. |