HIPAA: A Gap Analysis Is Not a Risk Analysis for ePHI
May 9, 2018 When it comes to complying with the requirements of the Healthcare Information Portability and Accountability Act (HIPAA) regarding electronic protected health information (ePHI), don’t confuse a gap analysis with a risk analysis, the Office of Civil Rights reminds healthcare providers in a recent bulletin. A gap analysis can help providers identify areas of vulnerability related to ePHI privacy and security, but it is not a substitute for the more comprehensive risk analysis and corrective action plan required under…