Question

1. Explain what a documentation audit is and the documentation audit cycle.

2. Explain the concept of a business associate under HIPAA.

3. Summarize the privacy standards of HIPAA and ARRA/HITECH regarding business associates.

4. Describe the key elements of a business plan for an independent consultant.

5. Explain the concept of a business associate under HIPAA.

Answer 1

Documentation audit : It is an audit is an objective analysis and examination of some aspect of a company's operations to confirm the extent to which the organization is in compliance with expected Standards. A compliance audit is designed to ensure the company is complying with applica- oble regulations or laws. A business assouate is a person or entity, other than a member of the workforce of a covered entity who performs functions' or activities on behalf, or provides certain services to, a covered entity that involve access by the business assoadte to protected health information. The Privacy rule applies only to covered entities. Many organizations that use collect, access and disa close individually identifiable health information will not be covered entities, lind thus, will not have to comply with Privacy rule. The Privacy Rute does not apply to research, it applies to covered entities, which research exs may or may not be.

© To gain access for research purposes to PHI created or maintained by covered entities, the researcher may have to provide supporting dowmentation on which the covered entity may rely in meeting the requirement, conditions and limitation of the Privacy Rule. O Business Assouate - X person or entity who, on behalf of a covered entity, performs or axits in berformance of a function or activity involving the use or disclosure of individually identifiable health information, such as data analysis, claim's processing or administration, utilization review, and qudlity assurance review or any other functions or activity regulated by the HIPAA Administrative, Simplification Rules, including the Privacy Rule.