Resource:
Hospice Compassus At A Glance
“Without Clearwater’s guidance and support, we would never have received the accolades from the OCR investigator for our compliance program that we did.”
At a Glance:
- Hospice Compassus (HC) is dedicated to compassionate care, clinical excellence, and providing comfort and support to patients with life-limiting illnesses and their family members
- Founded 1979, HC now has over 50 community-based hospice centers in 15 states
- A leader in palliative care, HC promotes regulatory compliance and information security
Challenges:
- Rapid growth through acquisition
- High turnover of clinicians in stressful occupation
- Wide use of mobile devices by traveling clinicians
- Need for Privacy, Security & Breach Rule help
- Data Breach triggered OCR Investigation
Clearwater Compliance Solutions:
- Assessed compliance status with Clearwater’s IRM|Security™ and IRM|Privacy™ software
- Utilizing Clearwater’s IRM|Analysis™ software, identified and assessed risks to HC’s assets maintaining or transmitting ePHI
RESULTS AND VALUE CREATED:
- Completed a rigorous compliance assessment as required by the HIPAA Security Rule regulation for a Security Evaluation (45 C.F.R. § 164.308(a)(8))
- Established baseline of compliance in HIPAA program; prioritized and implemented remediation plan
- Completed a bona fide risk analysis as required by the HIPAA Security Rule (45 C.F.R. § 164.308(a)(1)(ii)(A))
- Identified high-risk information exposures and prioritized mitigation activities to reduce those exposures
- Strengthened formal information risk management program
- Produced evidence of compliance with HIPAA-HITECH
- Passed OCR Investigation: no fines, no penalties