When to seek legal consultation for HIPAA

When to seek legal consultation for HIPAA

Is it reasonable to think that a private medical practice with a total of 18 employees can meet all the requirements of HIPAA without hiring expensive outside consultants? At what point (if any) should we have legal consultation. Thank you!

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Given the right tools, a fair amount of time and the budget to make it happen, I certainly believe it is reasonable to accomplish this internally. Keep in mind that not *all* outside consultants are expensive. You should be able to find some in your area that can do the work for a reasonable fixed cost so you don't have to worry about it getting out of control financially. Long term, given employee training, books and other tools that you will end up needing to purchase, not to mention pulling employees away from what they normally do on a full-time basis, it could very well be cheaper to outsource. At a minimum, you should consider getting legal counsel to review your HIPAA-mandated privacy and security policies to ensure they are reasonable and enforceable.


For more information on this topic, visit these other SearchSecurity.com resources:
Featured Topic: HIPAA update
Commentary: HIPAA compliance doesn't come in a box
Best Web Links: Securing Health Care/Health Services


This was first published in December 2002

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.