Segal Company

HIPAA Compliance Reviews

The Administrative Simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA, Title II) required the Department of Health and Human Services (HHS) to establish national standards for electronic health care transactions and national identifiers for providers, health plans, and employers. It also addressed the security and privacy of health data.

These HIPAA regulations have significant implications for multiemployer organizations. Our team of experts can help you review the impact of the legislation as well as the solutions required to satisfy both legal requirements and your business objectives.

Do you need a HIPAA Security Review?

  • Have you conducted a security evaluation to determine security vulnerabilities?
  • Have you had a third party perform a security and risk assessment?
  • Do you need more information about industry standards on security and how to evaluate different security alternatives?
  • Have you reviewed and updated your HIPAA security policies and procedures based on administrative or technical changes that have taken place since they have been implemented?

Do you need a HIPAA EDI Review?

  • Is your organization performing electronic transactions (EDI) with its trading partners?
  • Is your organization fully leveraging the EDI solution it has implemented?

Do you need a HIPAA Privacy Review?

  • Have you performed HIPAA privacy training for your staff?
  • Have you reviewed and updated your HIPAA privacy policies and procedures?

Our Approach

To help you comply with HIPAA regulations Segal will:

  • Conduct detailed on-site analysis, discovery, and interviews
  • Compare the current environment with HIPAA regulations (gap analysis)
  • Create a formal report that outlines the results of the HIPAA assessment
  • Prioritize activities that need to be completed based upon gaps identified during discovery
  • Conduct workforce training on privacy and security
  • Create policies and procedures that the HIPAA regulations require