"[E]mployers generally have procedures in place that ensure immediate termination of access to an employer's network and computer systems upon the employee's termination of employment.... [Do] you have audit controls in place to ensure the access has been properly terminated? If not, you should put some in place right away, especially if you are a covered entity under HIPAA. And remember not only health care providers are covered entities. Self-funded health plans are also covered entities and subject to the HIPAA privacy and security rules."  MORE >>