HIPAA Compliance

Risk Evaluation and Documented Security for your Healthcare or Dental Practice

The Healthcare Insurance Portability and Accountability Act (HIPAA) establishes requirements for the security of electronic Protected Health Information (e-PHI). It sounds straightforward yet with changing technology, compliance has become a moving target. 

Proof of compliance requires two basic elements: 

1. Risk Analysis 

2. Documented and Implemented Policies and Procedures

The MacSmith can assist your health care practice by performing a risk analysis audit, implementing necessary security measures, and providing ongoing scheduled updates to ensure that your technology is in compliance. We also provide documentation of your systems that can establish proof of compliance with HIPAA regulations. 

HIPAA Enforcement and Penalties

Potential HIPAA violations my be uncovered by a standard review of your organization or may be the result of an investigation following a complaint made to the Dept. of Health and Human Services about your organization’s practices.

Fines are imposed in four violation categories, and reflect the severity of a data breach, including factors such as the number of ePHI records affected, the kinds of records affected, and the negligence of the organization. The following penalties may be assessed:


1$100 - $50,000 per incident up to $1.5 MillionThe covered entity did not know and, by exercising reasonable diligence, would not have known that the violation occurred.

2$1,000 - $50,000 per incident up to $1.5 MillionThe violation was due to reasonable cause and not willful neglect.

3$10,000 - $50,000 per incident up to $1.5 MillionThe violation was due to willful neglect and was timely corrected.

4$50,000 per incident up to $1.5 Million The violation was due to willful neglect and was not timely corrected.

The information provided using this website is only intended to be general summary information to the public. It is not intended to take the place of either the written law or regulations. The full text of HIPAA can be found on the US Department of Health and Human Services website at: aspe.hhs.gov/report/health-insurance-portability-and-accountability-act-1996

Location: 917 US Route One, Yarmouth |Text Us: 207-228-3362 |Email: info@themacsmith.com |Mail: PO Box 6124, Falmouth, ME 04105

The MacSmith does not post advertising on this site but does participate in affiliate programs which enable us to receive a small commision for certain products. Proceeds help to maintain this website.

Copyright © The MacSmith 2021

Remote Access