HIPAA Privacy Compliance

[Guest Damien]

I was wondering if any TPA's or similar organizations out there are currently working on compliance with the new privacy regs, specifically the mandate for employee training, documentation of confidentiality procedures, establishment of a privacy officer, etc.

I know we will have to do this sooner or later, I'm wondering which it should be. Any recommendations?

Damien

[jeanine]

You probably should have started last year. All is not lost. There are many very good sites out there--I highly recommend HIPAAdvisory. I am trying to get a corporate committment to increase our effort and this is one of the first things you must do, get management's committment. We have already begun corporate awareness of the issue, had our employees sign a stricter confidentiality statement, went to a few seminars, etc. Our focus as a TPA is difficult. We administer Self-funded plans (which must be in compliance and will look to us for this assistance) and 2 insured product lines (actually part of the same entity) that we must bring into compliance. At the same time, we must comply with the requirements in regards to all other covered entities such as our hospitals and physicians. Your ability to transmit electronic claims according to the code set standards is something your IT/IS team should be completing.

[Guest Damien]

Thanks, Jeanine. When trying to get that commitment from management, it will help if I can say I am not the only person in the country who thinks we should get on top of this now.