HIPAA Myths and Facts

Myth 1 – I don’t sell health insurance, so I don’t have to worry about HIPAA.
Myth 2 – A breach will never happen to me.
Myth 3 – My agency is too small to worry about a violation.

HIPAA-Myths-and-FactsMany agencies ignore HIPAA issues because they believe it only pertains to agencies who sell health insurance, a  breach will never happen to them or their agency is just too small to worry about a violation.

However, these are the simple facts about potential HIPAA violations regardless of your agency size and the services you sell.

 

 

  • You don’t have to sell health insurance to have a violation. Property and Casual agencies come into contact with social security numbers, date of birth and other protected individual information that are subject to Gramm Leach Bliley (GLB). HIPAA compliance covers GLB compliance as well.
  • If you collect commission from an insurance carrier, you are at risk of a violation. Each carrier requires you to sign a Business Associate agreement where you agree to comply with doing HIPAA risk assessments, documenting how you handle protected health information, and ongoing training.
  • If you sell on the Healthcare Marketplace, you are at risk of a violation. Same as previous point, but now the Federal Government can come after you directly.

What could happen to your agency if you have a HIPAA breach?

Learn how this agency went out of business.

Make sure you understand the facts and ensure your agency against a HIPAA breach.
GRA Benefits Group’s PHI365 program will provide expert analysis, trained staff, and proper safeguards to implement in your agency. We do the work for you.

Our PHI365 consulting services will:

  1. Document your Privacy and Security Policy
  2. Conduct a Risk Analysis every three years
  3. Train employees annually
  4. Maintain a spirit of compliance

Call or email us today for a free analysis regarding your HIPAA requirements.
Our telephone number is 517.351.4908, and our email is [email protected].

Learn more about our HIPAA Compliance Service GRA’s PHI365.