Compliancy Group's HHS OCR HIPAA Audit Response Program

DISCLAIMER: The information provided in this article, other knowledge base articles, and the Compliancy Group website do not, and are not intended to, constitute legal advice. All information, content, and materials in the Knowledge Base and on the Compliancy Group website are for general informational purposes only.

Introduction

This article discusses Compliancy Group's HHS OCR HIPAA Audit Response Program. This service is a stand-alone service available for purchase by clients who enter into a specific Terms of Service, available here.

What is the Audit Response Program? 

As described in the Terms of Service, Compliancy Group’s Audit Response Program (ARP) assists clients who have received an Initial Data Request (IDR) or Corrective Action Plan (CAP) from the Office of Civil Rights (OCR) of the Department of Health and Human Services (HHS) related to HIPAA compliance. 

Through the ARP, we assist clients with generation and compilation of documents and reports that the client deems responsive to OCR information requests.

If a client requests that Compliancy Group retrieve information or generate reports from the client’s Guard account for the client's response to an OCR inquiry, Compliancy Group will use commercially reasonable efforts to provide information from The Guard that the client deems responsive to the inquiry, in a mutually agreed-upon format, to the client.

Alternatively, if the client requests that Compliancy Group assist the Client with determining how to access or generate the information for itself using The Guard’s reporting features and other functionality, Compliancy Group will provide commercially reasonable assistance.

Clients are responsible for submitting information to OCR, for adhering to applicable OCR deadlines, and for keeping Compliancy Group informed of OCR deadlines associated with ARP requests.

Compliancy Group cannot advise clients as to whether particular information Client requests that Compliancy Group retrieves or assists Client with retrieving from The Guard is legally sufficient or responsive to OCR inquiries.

Terms and Conditions of the ARP are set forth in the Terms of Service.