The Health Insurance Portability and Accountability Act or HIPAA, is a compliance standard that is designed to protect sensitive patient data. Any organization that deals with protected health information (PHI) is obligated to maintain and follow process, network and physical security measures in order to be HIPAA-compliant.

Concerns Associated With HIPAA Compliance

• HIPAA violations attract hefty penalties.
• Adequate training for handling PHI and dealing with malicious security attacks is critical.
• It is imperative to have a Security Incident Response Plan (SIRP) in place to deal with a security event.
• Professional assistance is required to handle the complexity of audits and to maintain the right documentation.