Employers who offer health benefits to their employees must ensure compliance with new HIPAA security rules (45 CFR Part 164). These compliance obligations include implementing policies, procedures, and notices as required to ensure the confidentiality, integrity, and availability of electronic protected health information (EPHI). Failure to comply with HIPAA regulations, including the new security rules, can result in fines ranging from $100 per violation up to $25,000.00 in a calendar year.

Minimum security rule compliance requirements for all employers who offer health benefits include the following:

• Performing a security risk analysis
• Implementing and enforcing a HIPAA security policy
• Notifying employees and plan participants about the new regulations
• Designating a security official
• Documenting all compliance efforts
• Retaining compliance documentation for up to 6 years.

Our attorney-reviewed 2006 HIPAA Security Rule Compliance Kit includes all of the forms, tools, notices and information you need to ensure compliance with these critical HIPAA regulations. This easy-to-use kit provides simplified compliance for any employer who sponsors health benefits. It includes mandatory documentation forms, a security policy notice, and a quick-reference guidebook intended to guide employers through the compliance process.

Specifications
The 2006 HIPAA Compliance Kit includes the following tools and information:

• A 54-page guidebook that includes an attorney's opinion on how to comply with the new regulations, frequently asked questions, a listing of all required and addressable safeguards, and the complete text of the rule.
• A pad of 25 HIPAA Security Policy Acknowledgment Forms to document each employee's receipt of the policy.
• A pad of 25 HIPAA Security Rule Project Forms to document implementation or consideration of required and addressable safeguards.
• 5 Risk Analysis Checklist Forms to identify internal and external threats and evaluate existing safeguards at least once annually
• A laminated 8.5 x 11 Security Notice that communicates a general policy to employees and includes space to designate a security official.