25% off all training courses Offer ends May 29, 2026
View HIPAA Courses
25% off all training courses
View HIPAA Courses
Offer ends May 29, 2026

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

HIPAA Compliance Solutions

If you conduct an Internet search for HIPAA compliance solutions, you will get thousands of results. Unfortunately most HIPAA compliance solutions being advertised provide a compliance service in only one or two areas of HIPAA. Few provide total solutions.

This is an important distinction to make. In order to be compliant with HIPAA, you have to be totally compliant. It may be commendable that you have HIPAA-compliant data storage, or HIPAA compliant channels of communication, but these are not total HIPAA compliance solutions.

It only takes one gap in your compliance efforts for a breach of PHI to occur. You could also be fined for failing to be totally HIPAA-compliant if you are audited by the Department of Health & Human Services (HHS). It is not necessarily the case that individual HIPAA compliance solutions are a waste of time and money, but they do not provide the total coverage you will need in order to be HIPAA compliant.

What Does Total HIPAA Compliance Consist Of?

This will depend on the nature of your business and whether it is classified as a Covered Entity, Business Associate or subcontractor. Large medical facilities that use, maintain and share PHI will likely be subject to a comprehensive selection of regulations from the following Acts of legislation:

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

  • The Health Insurance Portability and Accountability Act (1996).
  • The Privacy Rule (2000) and subsequent amendments.
  • The Security Rule (2003) and subsequent amendments.
  • The HIPAA Enforcement Rule (2006).
  • The Health Information Technology for Economic and Clinical Health Act (2009).
  • The American Recovery and Reinvestment Act (2009).
  • The Omnibus Final Rule (2013).

In order to be HIPAA-compliant, it may be necessary to comply with all these rules, or just a few. This is why there are no “one-size-fits-all” total HIPAA compliance solutions and so many companies offering solutions to patch different elements of HIPAA compliancy.

The Ten Steps To HIPAA Compliance

 

Author: Steve Alder is the editor-in-chief of The HIPAA Journal. Steve is responsible for editorial policy regarding the topics covered in The HIPAA Journal. He is a specialist on healthcare industry legal and regulatory affairs, and has 10 years of experience writing about HIPAA and other related legal topics. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. Steve shapes the editorial policy of The HIPAA Journal, ensuring its comprehensive coverage of critical topics. Steve Alder is considered an authority in the healthcare industry on HIPAA. The HIPAA Journal has evolved into the leading independent authority on HIPAA under Steve’s editorial leadership. Steve manages a team of writers and is responsible for the factual and legal accuracy of all content published on The HIPAA Journal. Steve holds a Bachelor’s of Science degree from the University of Liverpool. You can connect with Steve via LinkedIn or email via stevealder(at)hipaajournal.com

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist