TFS has developed an audit approach to document your road to compliance with the HIPAA privacy regulations. 

​

This approach consists of fieldwork conducted onsite, as well as an analysis of documentation, and compilation of results of privacy assessment.

• TFS conducts initial fieldwork to access your entities compliance with the HIPAA privacy regulations.

• TFS tests the applicable controls within your environment and provides a detailed analysis of the level of compliance in your organization.

• TFS assesses your organization’s privacy risk analysis and mitigation documentation by performing a privacy walkthrough of your organization, including interviews with your workforce.

 

HHS recently released their intention going forward to include a privacy audit for those chosen for a HIPAA security audit.  TFS recommends performing a privacy audit at least every three years and a security audit annually.