The Privacy Rule sets standards for health care providers to protect
the privacy of patients’ private health care information. The
Privacy Rule also gives patients certain rights with respect to that
information. HIPAA requires each health care provider, health plan and
health care clearing house (including billing companies), to review
their office’s privacy practices and privacy related policies
and procedures, to develop and implement certain legal documents, including
patient consents and business associate agreements and to make any necessary
changes to ensure that the patients’ private health care information
is fully protected.
Please note, however, that the Privacy Rule only requires that providers
undertake “reasonable” measures to comply. There is no requirement
that anyone sound proof examining rooms, encrypt telephone systems or
expend unreasonable sums of money to comply. Contact us for a checklist
that will give you an idea of the areas you need to cover in your efforts
to comply with the HIPAA Privacy Rule.
We do suggest that you work with an attorney who is familiar with the
HIPAA Privacy Rule and will be able to work with you to put together
your HIPAA Compliance Plan. We work with Yvonne Grassie, Esq., a health
care attorney who has been practicing law for 16 years and who represents
a wide array of health care providers, including DME, home infusion,
home health, physician offices and groups, CORFs and health care billing
companies. Ms. Grassie attended Washington University Law School in
St. Louis, Missouri and graduated in 1987. She served on the Washington
University Law Review, clerked for Ross and Hardies in Chicago and interned
with the House Banking Committee in Washington D.C. before moving to
Miami upon graduation from law school.
If you would like to set up a consultation with Ms. Grassie, please
feel free to contact her at 305-461-9770 or by e-mail at Yvonne@yglaw.com.
We look forward to assisting you in your efforts to comply with the
HIPAA Privacy Rule.
