Assignment Description

The Health Insurance Portability and Accountability Act (HIPAA) is a major regulatory aspect of health care information technology (IT). Complete the following for this assignment:

• Identify 1 type of health care information system, and explain the steps that would be required to conduct a HIPAA audit of the system within your organization.
• Explain what a gap analysis is and why it would be useful for the organization conducting the audit.
• Your goal is to ensure that the organization remains compliant and to identify any potential compliance gaps.

This assignment is about creating a plan for the audit, not implementing the actual audit. Make sure you include recent changes to HIPAA as a result of Health Information Technology for Economic and Clinical Health Act (HITECH Act), which was part of the American Recovery and Reinvestment Act of 2009 (ARRA).