How does your BAA (Business Associate Agreement) address breach notification to your clients? We're asking ourselves tough questions about HIPAA compliance, and our responsibilities as a trusted Business Associate and hosting partner.
The 2nd most important question to ask a Business Associate is:
Who performed your independent HIPAA audit and do you provide copies of the audit report?
Our third most important question to a Business Associate is:
What policies and technologies are used to protect my applications and PHI data?
If disaster strikes, how long will it take before PHI is available again?
Part of due diligence is asking yourself and your partners detailed questions about contingency plans in the event of a disaster.
|
|
HIPAA Compliant Data CentersBy outsourcing our data center, we have increased our revenue generating capability and ROI. I can reassign staff to provide faster responses to end user issues and develop faster, more complex solutions. - Erik Yochum, Director of IT, MMP |
Latest from the Online Tech Blog:
