I have to agree strongly with Jenny on this matter.
The following list might assist you with the requirements you should have in place to be HIPAA compliant. It will fall under the Security section of the HIPAA law.
http://hipaanews.org/checklist.htm
The last I understood this through my HIPAA training (not certification, this is a term used when company consultants come into an organization and or providers office to evaluate the knowledge and understanding of all employees, then a certified report is on file in case the organization or provider are faced with a DHHS audit).
As per The Department of Health and Human Services (DHHS), which manages and is responsible for enforcing Health Insurance Portability and Accountability Act (HIPAA) Rule, there is no company entrusted to certify an individual as "HIPAA Certified" or companies or products getting "official HIPAA certification".
There is HIPAA compliance training however, which is targeted specifically toward organizations, providers, employees and BA's (Business Associates) <---- This is where organizations and providers will need their BA's to have a BAA (Business Associate Agreement that they are HIPAA compliant).
All covered entities are trying to ensure that they are HIPAA compliant. There are some companies who offer HIPAA software, at quite the fee.
If you are not HIPAA compliant, then the clients who hire you are ultimately responsible for any violations. I'm sure they are going to want to confirm, prior to engaging in this line of business, that you have all the necessary mandated steps in place for security purposes.
You might even be required by a client to provide a written explanation of how your system design features map to the various HIPAA security rule standards. How does your software/system security stand up to the specific security compliance objectives of the client?
As Jenny stated, HIPAA compliance is complicated.
The best place to start would be:
http://www.hhs.gov/ocr/privacy/
I wish you the best!
HIPAA
Lily Chambers, The Virtual Office Goddess, LLC
Linear Mode
