In Health Data Management, Health Care Co-Chair Explains How Organizations Should Prepare for HIPAA Audits

Health care practice co-chair Deborah Gersh (Chicago) was quoted in an April 25 article in Health Data Management discussing ways in which health care organizations should prepare for Health Insurance Portability and Accountability Act (HIPAA) data breach audits.

Ms. Gersh explains that the U.S. Health and Human Services Office for Civil Rights expects that health care organizations have existing plans for specific types of data breaches such as hackers infiltrating data networks, a stolen employee laptop or other common breaches. Protection plans are not just about policies and procedures, but about employees understanding what specific roles they will play if a breach occurs.