Enacted into law in 1996, the Health Insurance Portability and Accountability Act (HIPAA) issued regulations relating to the management of medically sensitive documents. The Privacy Rule became effective on April 14, 2003, while the Security Rule deadline was April 21, 2005.
HIPAA affects any organization that creates, receives or maintains healthcare information, including hospitals, health maintenance organizations and healthcare insurers. HIPAA requires that Protected Health Information (PHI) must be kept secure for at least six years, or two years after a patient's death. This includes patient medical records, billing records, authorization forms from physicians and all communications between patient and physician.
Under the act, Business Records Management is a Business Associate. Be assured that we have taken every precaution and followed every guideline to assure strict adherence to these mandates at all levels of our organization.
HIPAA noncompliance can have devastating consequences. Organizations are exposed to severe fines and penalties, and also to litigation and negative publicity. Noncompliance can result in the following:
- Civil fines of up to $25,000 a year
- Criminal penalties reaching $250,000 and up to 10 years in prison
BRM will closely follow any new developments and regulations emerging from HIPAA and will quickly implement and update our own procedures to assure that BRM as well as our clients meet the compliance requirements of the Act. For more information about HIPAA and how BRM can help you become compliant, contact one of our Information Management Specialists at info@businessrecords.com.
Protecting your records, whether health-related or not, continues to be the highest priority at Business Records Management.
|
Contact brmdetails@businessrecords.com for more information. Someone will respond within 24 hours. |
BRM values your security and privacy. Click here to read our privacy policy.




