--- title: HIPPA Privacy and Breach Notification Compliance description: One thing that seasoned HR professionals know is the fact that governing authorities won't only wait for grievances to be file to audit for compliance image: https://blog.solvehr.com/hubfs/2017/blogs/HIPPA%20Form.jpg --- - ** Mon - Thurs: 8AM - 5:30PM — Fri: 8AM - 3PM [![pinnacle-logo-october-2013.png](https://blog.solvehr.com/hs-fs/hubfs/Images2016/pinnacle-logo-october-2013.png?width=123&name=pinnacle-logo-october-2013.png "pinnacle-logo-october-2013.png")](http://solvehr.com/) # News - [solveHR](http://www.thelistinc.com) - > - [solveHR Information Blog](https://blog.solvehr.com) - > - HIPPA Privacy and Breach Notification Compliance # HIPPA Privacy and Breach Notification Compliance 28 Aug Posted by pinnaclesolveshr Category: [HR Compliance](https://blog.solvehr.com/topic/hr-compliance), [HIPPA](https://blog.solvehr.com/topic/hippa) [ No Comments](https://blog.solvehr.com/hippa-privacy-and-breach-notification-compliance#comments-listing) ![HIPPA Form.jpg](https://blog.solvehr.com/hs-fs/hubfs/2017/blogs/HIPPA%20Form.jpg?width=618&height=464&name=HIPPA%20Form.jpg) If there is one thing that seasoned HR professionals know or come to count on is the fact that governing authorities won't only wait for grievances to be file to audit for compliance. They actively assess compliance within the scope of their power to enforce. In fact, as a part of continued efforts to determine compliance with the HIPAA Privacy, Security, and Breach Notification Rules, the HHS Office for Civil Rights (OCR) is in its second phase of audits of covered entities and their business associates. The 2016 Phase 2 HIPAA Audit Program will review the policies and procedures adopted and employed by covered entities and their business associates to meet selected standards and implementation specifications of the Privacy, Security, and Breach Notification Rules.  [www.hhs.gov](http://www.hhs.gov)   ##### Some Background on HIPPA compliance audits HIPAA established relevant national standards for the privacy and security of protected health information and the Health Information Technology for Economic and Clinical Health Act (HITECH) established breach notification requirements to provide greater transparency for individuals whose information may be at risk. HITECH requires the HHS Office for Civil Rights (OCR) to conduct periodic audits of a covered entity and business associate compliance with the HIPAA Privacy, Security, and Breach Notification Rules. [www.hhs.gov](http://www.hhs.gov) The relevance and importance concerning OCR audit duties on organizations focus on prevention. HR best practices around HIPPA Compliance revolve around awareness, infrastructure/protocols, and proactive internal governance. **Awareness -** **Infrastructure/Protocols -** **Internal Governance -** Particularly for HIPPA, Privacy and Breach Notification compliance where consequences are steep. Civil penalties range from $100 to $50,000 per violation. Criminal violations may also apply, including a fine up to $250,000 and imprisonment up to 10 years. As with most best practices, compliance should flow from values underpinning organizational culture, not the consequences. For most plugging into experience and implementation know how is the safest and fastest route to preventing compliance drama unique to HIPPA Privacy and Breach Notification. [pinnaclesolveshr](http://solvehr.com) is well versed in coming alongside organizations to mitigate HR risk in all areas, not just HIPPA compliance. We exist to deliver simplification by cost-effectively removing the HR burden. We solve HR so you can run your business.   **Download our HR Compliance 2017 Guide ** **[![HR Compliance Guide](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/10447/3d6dd747-b7a6-44d3-8fd7-f33697f10f42.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/10447/3d6dd747-b7a6-44d3-8fd7-f33697f10f42)** Topics: [HR Compliance](https://blog.solvehr.com/topic/hr-compliance), [HIPPA](https://blog.solvehr.com/topic/hippa) ### CATEGORIES - [management (12)](https://blog.solvehr.com/topic/management) - [HR (11)](https://blog.solvehr.com/topic/hr) - [HR Compliance (10)](https://blog.solvehr.com/topic/hr-compliance) - [Payroll (8)](https://blog.solvehr.com/topic/payroll) - [culture (8)](https://blog.solvehr.com/topic/culture) - [strategic (7)](https://blog.solvehr.com/topic/strategic) - [Culture & Retention (6)](https://blog.solvehr.com/topic/culture-retention) - [Employment (5)](https://blog.solvehr.com/topic/employment) - [Training & Development (5)](https://blog.solvehr.com/topic/training-development) - [Business Owners (4)](https://blog.solvehr.com/topic/business-owners) - [Compliance (4)](https://blog.solvehr.com/topic/compliance) - [Risk & Compliance (4)](https://blog.solvehr.com/topic/risk-compliance) - [leadership (4)](https://blog.solvehr.com/topic/leadership) - [Discrimination (3)](https://blog.solvehr.com/topic/discrimination) - [EEOC (3)](https://blog.solvehr.com/topic/eeoc) - [Recruitment & Selection (3)](https://blog.solvehr.com/topic/recruitment-selection) - [#review (2)](https://blog.solvehr.com/topic/review) - [ACA (2)](https://blog.solvehr.com/topic/aca) - [HIPPA (2)](https://blog.solvehr.com/topic/hippa) - [career (2)](https://blog.solvehr.com/topic/career) - [motivation (2)](https://blog.solvehr.com/topic/motivation) - [performance (2)](https://blog.solvehr.com/topic/performance) - [Appraisal (1)](https://blog.solvehr.com/topic/appraisal) - [Cobra (1)](https://blog.solvehr.com/topic/cobra) - [DOL (1)](https://blog.solvehr.com/topic/dol) - [FLSA (1)](https://blog.solvehr.com/topic/flsa) - [FTE (1)](https://blog.solvehr.com/topic/fte) - [Fair Labor Standards Act (1)](https://blog.solvehr.com/topic/fair-labor-standards-act) - [HR news (1)](https://blog.solvehr.com/topic/hr-news) - [I-9 (1)](https://blog.solvehr.com/topic/i-9) - [IRCA (1)](https://blog.solvehr.com/topic/irca) - [Overtime (1)](https://blog.solvehr.com/topic/overtime) - [Penalties (1)](https://blog.solvehr.com/topic/penalties) - [Taxes and Fees (1)](https://blog.solvehr.com/topic/taxes-and-fees) - [Work Well (1)](https://blog.solvehr.com/topic/work-well) - [regulations (1)](https://blog.solvehr.com/topic/regulations) [see all](https://blog.solvehr.com/hippa-privacy-and-breach-notification-compliance#) [** Ask Our Experts](http://pinnaclesolveshr.com/contact-us/) ### Recent Posts [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.solvehr.com%2Fhippa-privacy-and-breach-notification-compliance%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.solvehr.com%2Fhippa-privacy-and-breach-notification-compliance%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.solvehr.com%2Fhippa-privacy-and-breach-notification-compliance%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.solvehr.com%2Fhippa-privacy-and-breach-notification-compliance%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=HIPPA%20Privacy%20and%20Breach%20Notification%20Compliance) ![](https://blog.solvehr.com/hs-fs/hubfs/2017/logo/Pinnacle%20Logo%20white%20copy.png?width=110&height=117&name=Pinnacle%20Logo%20white%20copy.png "Pinnacle Logo white copy.png") We are the human resources outsourcing company for small, medium and large-sized businesses. ### SUBSCRIBE TO OUR BLOG ###### GET IN TOUCH 1635 NE Loop 410, Ste. 700 San Antonio, TX 78209 ###### [Testimonials](http://solvehr.com/customer-success/) - [** ](https://www.facebook.com/Solve-HR-552807684915776/) - [** ](https://twitter.com/wesolveHR) - [** ](http://www.google.com) Copyright © 2019 pinnaclesolveshr. All rights reserved