Finally! The Centers for Medicare and Medicaid Services (CMS) has announced that it will begin on-site reviews of HIPAA compliance at hospitals. The Health Insurance Portability and Accountability Act (HIPAA) was passed into law in 1996 but until now it has not been enforced with any rigour. CMS said that they expect to review ten to twenty hospitals over the next nine months.
This announcement represents a departure from the previous plan of “outreach and education,” or as I like to call it, “wait for complaints and then just telling the hospital do better next time.”