{"id":14522,"date":"2016-03-28T09:42:00","date_gmt":"2016-03-28T14:42:00","guid":{"rendered":"https:\/\/medsafe5stg.wpenginepowered.com\/?p=14522"},"modified":"2025-04-22T00:40:37","modified_gmt":"2025-04-21T16:40:37","slug":"phase-2-of-hipaa-audit-program-now-underway","status":"publish","type":"post","link":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/","title":{"rendered":"Phase 2 of HIPAA Audit Program Now Underway"},"content":{"rendered":"\n<p>On March 21, 2016, The HHS Office for Civil Rights (\u201cOCR\u201d) announced that the Phase 2 of HIPAA audits are now underway.&nbsp; The purpose of the audits is to assess the compliance of covered entities and business associates with HIPAA Privacy, Security and Breach Notification Rules.&nbsp; OCR intends to use the information gained from audits for compliance improvement activities such as enforcement tools, complaint investigations and compliance reviews.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Who will be audited?<\/h2>\n\n\n\n<p>Every covered entity from health care providers and organizations to health plans and business associates are eligible for an audit. OCR will not audit entities that have an open complaint investigation or are currently undergoing a compliance review.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What to expect?<\/h2>\n\n\n\n<p>The first and second set of audits will be desk audits for covered entities and business associates. All desk audits should be completed by the end of December 2016. The third set of audits will be more comprehensive than the first two rounds and conducted onsite.<\/p>\n\n\n\n<p>OCR is currently contacting potential auditees by email to verify their contact information. All business associates and covered entities should look for an email from OSOCRAudit@hhs.gov. Be sure to check junk and spam folders regularly, as OCR communications can be mistaken as spam. It is important to respond promptly to any communication received from the OCR.<\/p>\n\n\n\n<p>The process is as follows:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A letter will be sent by email with a pre-audit questionnaire; requesting information about the size, type, and operations of the organization.<\/li>\n\n\n\n<li>Complete the questionnaire.<\/li>\n\n\n\n<li>If selected for an audit, entities must produce their policies and procedures.<\/li>\n\n\n\n<li>Selected entities will submit documents online through the audit portal on OCR\u2019s website.<\/li>\n\n\n\n<li>OCR findings will be shared with the entity.<\/li>\n\n\n\n<li>The entity will have an opportunity to respond to the findings, and written responses will be included in the final report.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">How to prepare?<\/h2>\n\n\n\n<p>Audit preparation steps include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Make sure to check all emails, including junk and spam folders, regularly for emails from OCR.<\/li>\n\n\n\n<li>Review all policies and procedures to ensure compliance with current HIPAA regulations.<\/li>\n\n\n\n<li>Consider conducting an internal audit to identify any deficiencies or areas for improvement.<\/li>\n\n\n\n<li>Address any identified deficiencies or issues.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>On March 21, 2016, The HHS Office for Civil Rights (\u201cOCR\u201d) announced that the Phase 2 of HIPAA audits are now underway.&nbsp; The purpose of the audits is to assess [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":15447,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[18],"tags":[],"class_list":["post-14522","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hipaa-compliance"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.5 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Phase 2 of HIPAA Audit Program Now Underway - MedSafe<\/title>\n<meta name=\"description\" content=\"Learn about desk audits, comprehensive onsite audits, and the importance of promptly responding to OCR communications.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Phase 2 of HIPAA Audit Program Now Underway\" \/>\n<meta property=\"og:description\" content=\"Learn about desk audits, comprehensive onsite audits, and the importance of promptly responding to OCR communications.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/\" \/>\n<meta property=\"og:site_name\" content=\"MedSafe\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/MedSafeCompliance\" \/>\n<meta property=\"article:published_time\" content=\"2016-03-28T14:42:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-04-21T16:40:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/medsafe.com\/wp-content\/uploads\/2016\/03\/shutterstock_156022646_1_-1.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"2000\" \/>\n\t<meta property=\"og:image:height\" content=\"1333\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Tyler Howard\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tyler Howard\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/\"},\"author\":{\"name\":\"Tyler Howard\",\"@id\":\"https:\/\/medsafe.com\/#\/schema\/person\/8e449dab4624185a0388141159b08c10\"},\"headline\":\"Phase 2 of HIPAA Audit Program Now Underway\",\"datePublished\":\"2016-03-28T14:42:00+00:00\",\"dateModified\":\"2025-04-21T16:40:37+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/\"},\"wordCount\":361,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/medsafe.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/medsafe.com\/wp-content\/uploads\/2016\/03\/shutterstock_156022646_1_-1.webp\",\"articleSection\":[\"HIPAA Compliance\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/\",\"url\":\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/\",\"name\":\"Phase 2 of HIPAA Audit Program Now Underway - MedSafe\",\"isPartOf\":{\"@id\":\"https:\/\/medsafe.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/medsafe.com\/wp-content\/uploads\/2016\/03\/shutterstock_156022646_1_-1.webp\",\"datePublished\":\"2016-03-28T14:42:00+00:00\",\"dateModified\":\"2025-04-21T16:40:37+00:00\",\"description\":\"Learn about desk audits, comprehensive onsite audits, and the importance of promptly responding to OCR communications.\",\"breadcrumb\":{\"@id\":\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#primaryimage\",\"url\":\"https:\/\/medsafe.com\/wp-content\/uploads\/2016\/03\/shutterstock_156022646_1_-1.webp\",\"contentUrl\":\"https:\/\/medsafe.com\/wp-content\/uploads\/2016\/03\/shutterstock_156022646_1_-1.webp\",\"width\":2000,\"height\":1333},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/medsafe.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Phase 2 of HIPAA Audit Program Now Underway\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/medsafe.com\/#website\",\"url\":\"https:\/\/medsafe.com\/\",\"name\":\"MedSafe\",\"description\":\"The Total Compliance Solution\",\"publisher\":{\"@id\":\"https:\/\/medsafe.com\/#organization\"},\"alternateName\":\"MedSafe Healthcare Compliance\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/medsafe.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/medsafe.com\/#organization\",\"name\":\"MedSafe\",\"url\":\"https:\/\/medsafe.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/medsafe.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/medsafe.com\/wp-content\/uploads\/2025\/05\/medsafe-organization-logo.webp\",\"contentUrl\":\"https:\/\/medsafe.com\/wp-content\/uploads\/2025\/05\/medsafe-organization-logo.webp\",\"width\":696,\"height\":696,\"caption\":\"MedSafe\"},\"image\":{\"@id\":\"https:\/\/medsafe.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/MedSafeCompliance\",\"https:\/\/www.instagram.com\/medsafetcs\/\",\"https:\/\/www.youtube.com\/@MedSafeTCS\/featured\",\"https:\/\/www.linkedin.com\/company\/medsafe-the-total-compliance-solution-\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/medsafe.com\/#\/schema\/person\/8e449dab4624185a0388141159b08c10\",\"name\":\"Tyler Howard\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/medsafe.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6bf709312d28530eb3e3156e3916ce52728f96c99a0b4795127070d6ddde124b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6bf709312d28530eb3e3156e3916ce52728f96c99a0b4795127070d6ddde124b?s=96&d=mm&r=g\",\"caption\":\"Tyler Howard\"},\"description\":\"Tyler Howard is a passionate writer and industry expert with a keen eye for technology, business insights, and digital innovation. With years of experience in content creation, he brings engaging and informative articles that keep readers ahead of the curve. Whether exploring emerging trends or offering practical advice, Tyler's work aims to educate, inspire, and empower his audience. Stay tuned for his latest insights and thought-provoking discussions.\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Phase 2 of HIPAA Audit Program Now Underway - MedSafe","description":"Learn about desk audits, comprehensive onsite audits, and the importance of promptly responding to OCR communications.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/","og_locale":"en_US","og_type":"article","og_title":"Phase 2 of HIPAA Audit Program Now Underway","og_description":"Learn about desk audits, comprehensive onsite audits, and the importance of promptly responding to OCR communications.","og_url":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/","og_site_name":"MedSafe","article_publisher":"https:\/\/www.facebook.com\/MedSafeCompliance","article_published_time":"2016-03-28T14:42:00+00:00","article_modified_time":"2025-04-21T16:40:37+00:00","og_image":[{"width":2000,"height":1333,"url":"https:\/\/medsafe.com\/wp-content\/uploads\/2016\/03\/shutterstock_156022646_1_-1.webp","type":"image\/webp"}],"author":"Tyler Howard","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Tyler Howard","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#article","isPartOf":{"@id":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/"},"author":{"name":"Tyler Howard","@id":"https:\/\/medsafe.com\/#\/schema\/person\/8e449dab4624185a0388141159b08c10"},"headline":"Phase 2 of HIPAA Audit Program Now Underway","datePublished":"2016-03-28T14:42:00+00:00","dateModified":"2025-04-21T16:40:37+00:00","mainEntityOfPage":{"@id":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/"},"wordCount":361,"commentCount":0,"publisher":{"@id":"https:\/\/medsafe.com\/#organization"},"image":{"@id":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#primaryimage"},"thumbnailUrl":"https:\/\/medsafe.com\/wp-content\/uploads\/2016\/03\/shutterstock_156022646_1_-1.webp","articleSection":["HIPAA Compliance"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/","url":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/","name":"Phase 2 of HIPAA Audit Program Now Underway - MedSafe","isPartOf":{"@id":"https:\/\/medsafe.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#primaryimage"},"image":{"@id":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#primaryimage"},"thumbnailUrl":"https:\/\/medsafe.com\/wp-content\/uploads\/2016\/03\/shutterstock_156022646_1_-1.webp","datePublished":"2016-03-28T14:42:00+00:00","dateModified":"2025-04-21T16:40:37+00:00","description":"Learn about desk audits, comprehensive onsite audits, and the importance of promptly responding to OCR communications.","breadcrumb":{"@id":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#primaryimage","url":"https:\/\/medsafe.com\/wp-content\/uploads\/2016\/03\/shutterstock_156022646_1_-1.webp","contentUrl":"https:\/\/medsafe.com\/wp-content\/uploads\/2016\/03\/shutterstock_156022646_1_-1.webp","width":2000,"height":1333},{"@type":"BreadcrumbList","@id":"https:\/\/medsafe.com\/hipaa-compliance\/phase-2-of-hipaa-audit-program-now-underway\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/medsafe.com\/"},{"@type":"ListItem","position":2,"name":"Phase 2 of HIPAA Audit Program Now Underway"}]},{"@type":"WebSite","@id":"https:\/\/medsafe.com\/#website","url":"https:\/\/medsafe.com\/","name":"MedSafe","description":"The Total Compliance Solution","publisher":{"@id":"https:\/\/medsafe.com\/#organization"},"alternateName":"MedSafe Healthcare Compliance","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/medsafe.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/medsafe.com\/#organization","name":"MedSafe","url":"https:\/\/medsafe.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/medsafe.com\/#\/schema\/logo\/image\/","url":"https:\/\/medsafe.com\/wp-content\/uploads\/2025\/05\/medsafe-organization-logo.webp","contentUrl":"https:\/\/medsafe.com\/wp-content\/uploads\/2025\/05\/medsafe-organization-logo.webp","width":696,"height":696,"caption":"MedSafe"},"image":{"@id":"https:\/\/medsafe.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/MedSafeCompliance","https:\/\/www.instagram.com\/medsafetcs\/","https:\/\/www.youtube.com\/@MedSafeTCS\/featured","https:\/\/www.linkedin.com\/company\/medsafe-the-total-compliance-solution-\/"]},{"@type":"Person","@id":"https:\/\/medsafe.com\/#\/schema\/person\/8e449dab4624185a0388141159b08c10","name":"Tyler Howard","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/medsafe.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6bf709312d28530eb3e3156e3916ce52728f96c99a0b4795127070d6ddde124b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6bf709312d28530eb3e3156e3916ce52728f96c99a0b4795127070d6ddde124b?s=96&d=mm&r=g","caption":"Tyler Howard"},"description":"Tyler Howard is a passionate writer and industry expert with a keen eye for technology, business insights, and digital innovation. With years of experience in content creation, he brings engaging and informative articles that keep readers ahead of the curve. Whether exploring emerging trends or offering practical advice, Tyler's work aims to educate, inspire, and empower his audience. Stay tuned for his latest insights and thought-provoking discussions."}]}},"_links":{"self":[{"href":"https:\/\/medsafe.com\/wp-json\/wp\/v2\/posts\/14522","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/medsafe.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/medsafe.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/medsafe.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/medsafe.com\/wp-json\/wp\/v2\/comments?post=14522"}],"version-history":[{"count":0,"href":"https:\/\/medsafe.com\/wp-json\/wp\/v2\/posts\/14522\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/medsafe.com\/wp-json\/wp\/v2\/media\/15447"}],"wp:attachment":[{"href":"https:\/\/medsafe.com\/wp-json\/wp\/v2\/media?parent=14522"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/medsafe.com\/wp-json\/wp\/v2\/categories?post=14522"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/medsafe.com\/wp-json\/wp\/v2\/tags?post=14522"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}