HIPAA Compliance Methodology Overview Card

The HIPAA Privacy and Security Rules create the floor establishing appropriate privacy and security practices for select categories of organizations. This means that there may be other statutes and regulations (state and federal) that require adherence to higher standards, there may be business needs that require a higher level of security and associated privacy because of business needs or the sensitivity of data used and disclosed. It is important to remember that your organization may not be considered a “covered entity” under HIPAA, but your organization may still be subject to the provisions of HIPAA via contract or case law. HIPAA, in the healthcare industry, has been considered by a number of courts to be the “law of the land” when it comes to protecting the privacy and security of consumers.