Health Insurance Portability and Accountability Act

Ayottaz  helps companies with their HIPAA compliance requirements  which are largely mandated across health care and health tech sectors

Get Started
Get your Data Privacy and Information Security assessment now!

Qualified Trainings

Best in class experts

Technology Solutions

One of the Best Prices

HIPAA

What is HIPAA Compliance ?

HIPAA compliance is adherence to the physical, administrative, and technical safeguards outlined in HIPAA, which covered entities and business associates must uphold to protect the integrity of Protected Health Information (PHI)

The HIPAA Privacy & HIPAA Security Rules

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) required the Secretary of the U.S. Department of Health and Human Services (HHS) to develop regulations protecting the privacy and security of certain health information. To fulfill this requirement, HHS published what are commonly known as the HIPAA Privacy Rule and the HIPAA Security Rule. The Security Rule operationalizes the protections contained in the Privacy Rule by addressing the technical and non-technical safeguards that organizations called “covered entities” must put in place to secure individuals’ “electronic protected health information” (e-PHI). Within HHS, the Office for Civil Rights (OCR) has responsibility for enforcing the Privacy and Security Rules with voluntary compliance activities and civil money penaltie

The Privacy Rule

The Privacy Rule, or Standards for Privacy of Individually Identifiable Health Information, establishes national standards for the protection of certain health information.  

The Security Rule

The Security Standards for the Protection of Electronic Protected Health Information (the Security Rule) establish a national set of security standards for protecting certain health information that is held or transferred in electronic form

Who must Comply?

Health Care Providers

of medical or other health care services or supplies who transmits any health information in electronic form

in connection with a transaction for which HHS has adopted a standard.

eg. Doctors, Clinics, Psychologists, Dentists, Chiropractors, Nursing homes, Pharmacies

Health Plan

Any individual or group plan that provides or pays the cost of health care

(e.g., a health insurance issuer and the Medicare and Medicaid programs)

Clearinghouses

A public or private entity that processes another entity’s health care transactions

from a standard format to a non-standard format, or vice-versa

Business Associates

to help carry out its health care activities and functions