This HIPAA Privacy Risk Analysis Checklist can be used to assess if an organization follows HIPAA’s privacy and security rules by identifying vulnerabilities and weaknesses on the following areas:
Check-in procedures
Clinical areas
Front office and business office
Medical records
Methods of conveying PHI
Personnel policies
Other general areas
A HIPAA Risk Assessment Template is used for identifying threats and vulnerabilities in the organization that can put Protected Health Information (PHI), sometimes also referred to as Personal Health Information, at risk. This template enables privacy compliance officers to:
Observe current practices among staff and record how PHI is handled
Evaluate threats and vulnerabilities discovered during observation by assigning
Take or attach photo evidence of non-compliance
Assign actions
Generate assessment reports
Identify the next steps to be able to comply with HIPAA regulations
Use this checklist as a guide for annually evaluating devices in the organization to prevent data breaches. Questions covered in this HIPAA Annual Risk Analysis include:
Working condition
Signs of damage
Password storage & location
PHI security
This pre-existing template from Thomas Jefferson University Hospitals can be used by organizations as a guide to ensure compliance with HIPAA policies and regulations. One of the main things that this checklist review is the organization’s rules in disposing and retention of protected health information of patients.