Internal Due Diligence Review Critical for Physician Practices

by Steven M. Harris, Esq. •

As part of your internal review, you should ensure that your workforce has been properly trained in HIPAA compliance and that such training is documented in writing. A great deal of focus is placed on HIPAA compliance, and it’s important to remain cognizant of state privacy and confidentiality laws, as well as data security laws, that may affect your practice. You need to comply with all relevant state laws, not only for those states in which you have a physical location, but also states where patients may reside, because those state laws may apply as well.

Conducting regular internal compliance checkups could make the difference between a successful government audit, a lucrative business transaction, and/or avoiding civil and criminal penalties for violations of law. In the next installment of “Legal Matters,” which will publish in the September issue of ENTtoday, we’ll discuss additional areas of focus for an internal checkup of your practice.

Steven M. Harris, EsqSteven M. Harris, Esq., is a nationally recognized healthcare attorney and a member of the law firm McDonald Hopkins LLC. Contact him via e-mail at sharris@mcdonaldhopkins.com.

Reprinted with permission from the American College of Rheumatology