This rapid fire presentation will consist of numerous concerns that OCR has regarding business associates. We will spend time discussing what the law requires of the audits, who is performing the audits, what both the CE and the BA should know, and how to prepare for an audit. Also, we will discuss gap analysis, security risk assessments, identifying PHI in the "food chain", business associate agreements (BAA's), breach notification policies, effective staff training compared to simply providing some training, and employee awareness of their responsibilities regarding the ever changing world of information protection.
Why should you attend: It is believed by OCR that business associates (BA) have more compliance problems than they think and that they are at risk for more breaches than they should be. We will discuss matters of concerns that both covered entities (CE) and business associates should be prepared for.
Areas Covered in the Session: