The materials will be updated annually, as appropriate.įor additional information, please review our other Security Rule Guidance Material and our Frequently Asked Questions about the Security Rule. §§ 164.302 – 318.) This series of guidance documents will assist organizations in identifying and implementing the most effective and appropriate administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of electronic protected health information. The Office for Civil Rights (OCR) is responsible for issuing periodic guidance on the provisions in the HIPAA Security Rule. The slides for these sessions are posted at the following link, and a recording will be posted as soon as possible: OCR and ONC are holding training sessions and overview of the SRA Tool.

The tool’s features make it useful in assisting small and medium-sized health care practices and business associates in complying with the Health Insurance Portability and Accountability Act (HIPAA) Security Rule. The Office of the National Coordinator for Health Information Technology (ONC) and the HHS Office for Civil Rights (OCR) have jointly launched a HIPAA Security Risk Assessment (SRA) Tool. Target users include, but are not limited to, HIPAA covered entities, business associates, and other organizations such as those providing HIPAA Security Rule implementation, assessment, and compliance services. The NIST HIPAA Security Toolkit Application, developed by the National Institute of Standards and Technology (NIST), is intended to help organizations better understand the requirements of the HIPAA Security Rule, implement those requirements, and assess those implementations in their operational environment.

Other Administrative Simplification Rules.

Covered Entities & Business Associates has sub items, about Covered Entities & Business Associates.

Patient Safety has sub items, about Patient Safety.

Mental Health & Substance Use Disorders.

Special Topics has sub items, about Special Topics.

Compliance & Enforcement has sub items, about Compliance & Enforcement.Breach Notification has sub items, about Breach Notification.

Medical device risk assessment template