[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-244735-105":53,"doc-detail-244735-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","six-months-to-go-tuning-up-for-hipaa-compliance-tips-of-the-trade","Six+ Months to Go - Tuning up for HIPAA Compliance - Tips of the Trade","","A presentation focused on preparing for HIPAA compliance within the final six-plus months, addressing what privacy and security officials worry about and how to respond. It outlines enforcement and compliance accountability, including oversight by OCR, CMS, DOJ, FBI, and related review processes. It summarizes HIPAA Privacy Rule enforcement activity through complaint statistics, highlights common complaint categories, and explains business risks and consequences of noncompliance, including litigation, loss of confidence, and civil and criminal penalties.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/six-months-to-go-tuning-up-for-hipaa-compliance-tips-of-the-trade/244735/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/six-months-to-go-tuning-up-for-hipaa-compliance-tips-of-the-trade/244735.png","ImageObject",442,249,{"name":88,"@type":89},"Xiajie","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-19","2026-09-12",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",7,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What keeps privacy and security officials awake at night in HIPAA compliance planning?","Question",{"text":109,"@type":110},"Enforcement and accountability, missing knowledge about “reasonably anticipated threats,” the need to prove controls through documentation, and understanding what other laws and regulations apply via crosswalks.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"Who enforces HIPAA and participates in related review processes?",{"text":114,"@type":110},"The Office of Civil Rights (Privacy) and CMS (Transactions, Code Sets, Identifiers, Security) are highlighted, along with the Justice Department, FBI, OIG, accreditation reviews, and plaintiff’s bar & courts.",{"name":116,"@type":107,"acceptedAnswer":117},"What are the key consequences and business risks of not complying with HIPAA?",{"text":118,"@type":110},"Risks include possible litigation, loss of public confidence, and penalties such as civil monetary penalties for violations and criminal exposure for wrongful disclosure, with no private right of action.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},244735,1791739873,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":136,"language":137,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":61,"update_tm":141,"read_time":142},8814010472675,"https://avatar.qwps.com/avatar/WGlhamll","Six+ Months to Go:  \nTuning up for HIPAA Compliance – Tips of the Trade  \nPresented to:  \nPre-Conference Symposia The Ninth National HIPAA Summit  \nHolt Anderson, Executive Director North Carolina Healthcare Information & Communications Alliance, Inc.  \n© 2004 NCHICA, All Rights Reserved. Do Not Duplicate Without Permission  \nWhat keeps Privacy and Security Officials Awake at Night ?  \nWhat keeps Privacy and Security Officials  \nAwake at Night ?  \n• Who is judging our effort?  \n– Enforcement  \n• What don’t I know?  \n– “Reasonably anticipated threats”  \n• How do we prove it?  \n– Documentation  \n• What other Laws and Regulations apply?  \n– Crosswalks  \n• Where do I get help?  \n– Resources  \n• Why was I chosen?  \n– ????  \nCompliance & Enforcement  \nHIPAA Enforcement  \n• Office of Civil Rights (Privacy)  \n• CMS (Transactions, Code Sets, Identifiers, Security)  \n• Justice Department  \n• FBI  \n• OIG (Re: lessons learned from fraud & abuse)  \n• Accreditation reviews  \n• Plaintiff’s bar & courts  \n• Business Continuity  \nHIPAA Enforcement at CMS  \nCMS Office of HIPAA Standards:  \n»Establish and operate enforcement processes »Develop regulations  \n»Obtaining voluntary compliance through technical assistance  \n»Process will be complaint driven  \nSummary of HIPAA Privacy Rule Compliance Activities  \n􀂉 Received by HHS Office of Civil Rights (OCR)  \n􀂉  7,577 complaints as of July 31, 2004.  \n􀂉  57% have been closed, because either  \n􀂉– Office for Civil Rights (OCR) lacks jurisdiction 􀂉– There was no violation of the Privacy Rule  \n􀂉– Complaint resolved through voluntary compliance  \nSummary of HIPAA Privacy Rule Compliance Activities (cont.)  \n􀂉 Most frequent complaints  \n􀂉 Impermissible use or disclosure  \n􀂉 Lack of adequate safeguards  \n􀂉 Refusal or failure to provide right of access  \n􀂉 Disclosures not limited to “minimum necessary” standard  \n􀂉 Failure to obtain individual’s authorization, when required  \n􀂉  108 referrals to the Department of Justice (DOJ)  \nOCR refers to the DOJ complaints involving the knowing disclosure or obtaining of protected health information in violation of the Privacy Rule.  \nBusiness Risks  \n• Loose implementation may open the door to litigation for privacy violations  \n• Not adjusting as scope and complexity of current environment / technology changes  \n• Unquestioning reliance on vendors and “HIPAA Compliant” solutions  \n• Not completing a thorough analysis / compliance effort and is found negligent  \nImpact of Not Complying  \n􀂄 Possible litigation  \n􀂄 Loss of public confidence  \n􀂄 Penalties  \n− Civil monetary for violations of each standard  \n− Criminal for wrongful disclosure of protected health information  \n− No private right of action","cbCaiopzdl6rXVGj","https://ap.wps.com/l/cbCaiopzdl6rXVGj","pdf",2064657,79,"English","# What keeps Privacy and Security Officials Awake at Night?\n## Enforcement and accountability\n## Reasonably anticipated threats and documentation\n## Applicable laws and regulations crosswalks\n## Where to get help\n# HIPAA Enforcement\n## HIPAA Enforcement at OCR and CMS\n# Summary of HIPAA Privacy Rule Compliance Activities\n## Complaint statistics and closure reasons\n## Most frequent complaint types\n## Referrals to the Department of Justice (DOJ)\n# Business Risks and Impact of Not Complying","[{\"question\":\"What keeps privacy and security officials awake at night in HIPAA compliance planning?\",\"answer\":\"Enforcement and accountability, missing knowledge about “reasonably anticipated threats,” the need to prove controls through documentation, and understanding what other laws and regulations apply via crosswalks.\"},{\"question\":\"Who enforces HIPAA and participates in related review processes?\",\"answer\":\"The Office of Civil Rights (Privacy) and CMS (Transactions, Code Sets, Identifiers, Security) are highlighted, along with the Justice Department, FBI, OIG, accreditation reviews, and plaintiff’s bar \\u0026 courts.\"},{\"question\":\"What are the key consequences and business risks of not complying with HIPAA?\",\"answer\":\"Risks include possible litigation, loss of public confidence, and penalties such as civil monetary penalties for violations and criminal exposure for wrongful disclosure, with no private right of action.\"}]","Six+ Months to Go - Tuning up for HIPAA Compliance - Tips of the Trade | PDF",1789221384,28]