The first step to establishing procedures for how PHI is handled, processed, and stored in your organization is to have a clear idea of the amount of PHI being accessed. The inventory helps your organization know the who, what, and where of Protected Health Information.

This guide offers an overview of the Breach Notification and covers what to do if you experience a breach.

Covers Business Associates and their role in safeguarding PHI. In this step, you will build an inventory of your business associates and business associate agreements.

Identify and define who will be the Privacy Official and the Security Official for your organization.

Information about HIPAA and how to use the PrivaPlan Toolkit.

A Security Risk Analysis is the heart of your HIPAA compliance efforts. Build an inventory of PHI and review your technical safeguards with these risk analysis steps.

This guide discusses handling patient acknowledgments, requests, and complaints, including restrictions on disclosing their PHI. This section also covers creating a Notice of Privacy Practices for your organization.

A compliance first guide to adding generative AI, and AI ambient scribes, to your health care workflow.