Looking for a Business Associate Agreement? Download our FREE starter template.
Total HIPAA Logo

Auditing Business Associates

Have you Audited your HIPAA Business Associates?

This question comes up frequently when we are working on HIPAA Policies and Procedures for our clients. The answer is rarely “yes”. We find that most folks don’t even know where to begin with this process, or they’ve been using the services of their various vendors who handle PHI for so long, they haven’t given their HIPAA compliance stance a second thought or considered auditing their business associates.

The reason this is so important for your business is the Omnibus Ruling, and specifically the “federal common law of agency” provision. This means that your business is liable for civil money penalties for a violation committed by a workforce member or a Business Associate.  Read the law itself at the end of this article.1

How To

What kind of questions should you ask? Well, we’ve put together a short questionnaire for you to give to any vendors that handle PHI. If they answer “NO” to any of these questions, it means your Business Associate isn’t HIPAA Compliant, and you have a MAJOR liability issue on your hands!

Register here to receive your free BA/Subcontractor Audit Checklist:

RELATED CONTENT

Here are some previous articles we’ve written about why HIPAA Compliance is so important for your Business Associates as well as information about Phase 2 audits.


Total HIPAA specializes in HIPAA compliance services, helping businesses adhere to HIPAA guidelines and protect sensitive data. Our experts ensure your organization remains compliant with HIPAA regulations, meaning you can focus on your core operations while we handle documenting the policies and procedures that make up your HIPAA compliance plan. Trust Total HIPAA for comprehensive compliance solutions tailored to your needs. Book a clarity call today.


FOOTNOTE

  1. 45 CFR 160.402 (1) A covered entity is liable, in accordance with the Federal common law of agency, for a civil money penalty for a violation based on the act or omission of any agent of the covered entity, including a workforce member or business associate, acting within the scope of the agency.

MORE RELATED CONTENT

Business Associate Agreement: Everything Explained

Business Associates Must Take HIPAA Compliance Seriously

Sharing is caring!

Documents

Looking for a Business Associate Agreement?

Download our free template to get started on your path toward HIPAA compliance.

Download Now

Let's keep in touch

Stay up to date on the latest HIPAA news, plus receive tons of free tools and info.

Navigating HIPAA Compliance in 2023

Watch the recording of this webinar to learn more about how you can become and stay HIPAA compliant!

Document

Related Posts

What is Access Control in terms of HIPAA?

What is Access Control in terms of HIPAA?

Access control, in terms of cybersecurity, refers to the practice of managing and regulating who can access specific resources, systems, or data within an organization's network or information...

Comparing HIPAA and NIST

Comparing HIPAA and NIST

In the ever-evolving landscape of data security and privacy, two key frameworks have emerged as significant players: HIPAA and NIST. Both emphasize the importance of safeguarding sensitive...

Save & Share Cart
Your Shopping Cart will be saved and you'll be given a link. You, or anyone with the link, can use it to retrieve your Cart at any time.
Back Save & Share Cart
Your Shopping Cart will be saved with Product pictures and information, and Cart Totals. Then send it to yourself, or a friend, with a link to retrieve it at any time.
Your cart email sent successfully :)