GrahamTim 5.02 HIPAA Risk Assessment Audit

HIPAA RISK ASSESSMENT AUDIT Philadelphia VA Medical Center Service Area: ___________________________________________ Date: _________________________________________ 45 C.F.R. § 164.530: Safeguards. A covered entity must have in place appropriate administrative, technical and physical safeguards to protect the privacy of PHI (Protected Health Information). Y N NA Recommended Solution(s) ORAL COMMUNICATIONS Have you witnessed any of your staff discussing confidential Protected Health Information (PHI) among themselves in public areas? If Yes, explain why it occurs and give recommended improvements/safeguards. Are visitors, other staff or patients able to hear medical discussions? Have conversations with the patient and/or his/her family, which may include protected health information, been held in public areas? improvements/safeguards. Can phone conversations, which may be relaying protected health information, be easily overheard in public areas? If Yes, explain why it occurs and give recommended Is dictation completed in an area where protected health information can be overheard? improvements/safeguards. Except for the patient’s name, is protected health information ever called out into the waiting area(s)? When retrieving voice mail messages, is the answering machine volume turned down so messages being listened to cannot be overheard by others? If No, explain why it occurs and give ...