Question

In order to be compliant organizations must keep PHI safe. What safeguards can an organization implement to protect PHI and monitor compliance?

Answer 1

An organization can implement following safeguards to protect PHI (Protected Health information) & monitor compliance.

A. Develop and implement information security system and infrastructure that prevents any scope of theft, or unauthorized access of the data under the PHI and comply with the guidelines. I will be done after the detailed analysis of potential risk associated with the PHI.

B. A risk management system in place with the sanctioning policy involving the necessary steps and provisions to deal with the individuals or entities who fail to comply with the rules and breach the Privacy required by PHI. It will help the individuals to deter from any misuse or unauthorized use of PHI.

C. Setting up a specific team with exclusive responsibility to maintain the safeguard standards of the HIPPA. It will bring proactive approach to protect the PHI without any ambiguity in the discharging of responsibilities.

D. Setting up a specific clearing house function related to health care activities and it should be in isolation so that security level is enhanced and guidelines are followed. Besides, the data backup plan should also be in place so that loss of data should be prevented in the scenario of any unforeseen event.

E. Regular review of the IT security and risk management system so that all potential loopholes getting developed over a period of time.