OCR Undecided on BA Inclusion in HIPAA Audits
HEALTHCARE PRIVACY—U.S.August 5, 2011
The Office for Civil Rights (OCR) has not decided whether it will include business associates (BAs) in its HIPAA-compliance audit plans, HealthLeaders Media reports. OCR Deputy Director of Health Information Privacy Susan McAndrew says KPMG, the company that was granted the OCR's $9.2 million contract, will develop BA audit protocols. McAndrew also says the "OCR has not yet determined whether it will audit business associates in addition to covered entities during the audits that are anticipated to take place in 2011." Editor's Note: For more on the HIPAA audit program, request the archived recording from last week's Web conference,The Upcoming OCR HIPAA Audit Program: What To Expect and How To Prepare, from IAPP Knowledge Manager Dave Cohen.