Health Information Compliance Alert

4 questions to test your outsourcing smarts

1. The HIPAA privacy rule:
 a. makes outsourcing offshore illegal.
 b. makes offshoring your PHI very simple.
 c. demands that you take special precautions to guarantee the security of all outsourced PHI, especially if it is sent offshore.

2. The best way to avoid privacy breaches down stream is:
 a. never outsource!
 b. research potential contractors and establish a BAA with them that makes them obligated to protect patients' privacy.
 c. trust your contractors and subcontractors.

3. Which HIPAA obligations can be applied to your BAs?
 a. All of them, but HIPAA violations affect only the covered entity.
 b. Only the accounting of disclosures.
 c. None.

4. If there is a privacy breach, what is the best way to mitigate possible damages?
 a. Hide the evidence from your patients.
 b. Refuse to accept responsibility
 c. Own up to your mistake and explain how you'll make it better!