HIPAA Audits 2015
Auditing is to Increase; Increased Contractors; Business Associates at Risk
By: Brian L Tuttle, CHP, CHA, CPHIT, CBRA, CCNA, CISSP

Well D-Day in the Health Insurance Portability and Accountability Act (HIPAA) world (September 23, 2013) has come and gone and we are all still here, the world hasn’t ended, the Feds still haven’t kicked down your doors demanding to comb over your practice or business……yet. As of now the Federal government has a heavy workload in terms of who, what, when, and where will be affected by their new enforcement efforts. Their progress was stunted a bit by the recent government shut down, but as of this writing (November 14, 2013) they are back in business.
As you may or may not know, the enforcement wing of the U.S. Department of Health and Human Services (HHS), which is the Office of Civil Rights (OCR), began a pilot campaign of audits in the summer of 2012. This pilot campaign is to become a full time heavily enforced effort with many more facets involved. Based upon the findings there are many areas that need to be addressed chiefly dealing with the HIPAA Security Rule (65% of fines levied) in comparison with the HIPAA Privacy Rule (26% of fines levied) and the Breach Notification Rule (9% of fines levied). Going forward the OCR plans to evolve this process and give sharp teeth to what’s already going on. Originally the law firm KPMG was given the contract to conduct these pilot audits. According to HHS, the government plans to bring in many more firms (and subcontractors of those firms) to enforce and audit. Leon Rodriguez, director for OCR, stated at the HIMSS Privacy and Security Forum in Boston on September 23, 2013 “We hope to be off and running in the next calendar year.” Additionally, Mr. Rodriguez stated that OCR “will leverage more civil penalties” but more concerning is that fines levied are expected to pay for the audit program and be a revenue generating process for the Feds.
















While various types of regulatory and insurance “audits” are on the radar of any prudent Federally Qualified Health Center (FQHC) or hospital, as health care providers, Section 340B audits are a relatively new and unknown animal. The Section 340B Program, whereby qualified covered entities can benefit from substantial discounts on certain patient drugs, has existed since 1992. Section 340B audits, however, began less than three years ago. The U.S. Department of Health and Human Services, through the 


On December 9, 2014, the U.S. Department of Health & Human Services (HHS) 

The Department of Justice (DOJ)