HIPAA Privacy and Security
Maintaining the privacy of a patient’s medical information is a concern of health care providers as well as the patients themselves. Whether a client is an individual health care professional, health care facility, or a business associate or vendor, they have an obligation to maintain the privacy of a patient’s protected health information (PHI), and in certain situations may be required to comply with the HIPAA Security Rule. To determine a client’s level of HIPAA compliance, The Health Law Center routinely conducts risk assessment audits, beginning with a proprietary self-assessment checklist completed by the client. Following the risk assessment audit and analysis, The Health Law Center presents an itemized summary and plan of action for the client, which may include updating policies and procedures or taking reasonable steps to address administrative, physical and technical safeguards if the health care provider is subject to the HIPAA Security Rule.
While individual patients are not as familiar with a health care provider’s HIPAA obligations, they nonetheless expect their medical information will remain confidential and only divulged as they authorize or as allowed by law. When individuals feel the privacy of their medical information has been compromised or misused, The Health Law Center works with the client to evaluate the situation, determine if state or federal laws have been violated, and advocate for the client to correct any wrongdoing. Individual and family members have come to rely on The Health Law Center to analyze possible HIPAA violations, identify steps to rectify the situation, and have the knowledge to navigate the health care system to address the clients’ issues.
Donna’s expertise and compassion made all the difference. She diligently represented me until the matter was resolved. Donna’s sharp legal mind and superb personal character helped me overcome my professional challenges. She was accessible and responsive throughout my case. She believed in me and showed that she had my best interests at heart during a very difficult time in my career.
Professional Counselor, MuskegonI was in need of legal assistance and was fortunate to find Donna Craig who was able to provide excellent legal advice as well as the compassion to ease my worries about the situation. Donna knows nursing and the laws surrounding healthcare. I highly recommend her services.
Registered Nurse, RosevilleDonna’s knowledge about HIPAA and her practical approach has been invaluable to our company. Management knew we needed to take steps to comply with HIPAA but was at a loss on how to accomplish that task. Donna worked with management and our technology department to review our current practices, conducted a HIPAA audit and analysis, and worked hand-in-hand with us to achieve the administrative, physical and technology requirements of HIPAA. She continues to be a great resource to our company, keeping us updated on legal requirements.
Health Information Technology Company, Kalamazoo
