HIPPA Security Rule Compliance Issue

Publicly traded company needed to have its group health plan become compliant with the HIPAA Security Rule. As in-house counsel David Cossi conducted an audit that discovered a recent acquisition, payroll being moved from HR to Finance, and IT only beginning to establish SOP’s. Over 3 months, David worked with 5 business units and newly acquired subsidiary to create new policies and bring procedures into alignment to guard “protected health information.” He integrated IT compliance issues into Security Rule requirements and brought company into compliance with a self-administrable program for maintaining compliance.