Why Steri•Safe Compliance Solutions?

Simple, Professional Service	Expert Partners by Your Side	One Source, Countless Solutions
We’ve designed our operations to deliver convenience, with minimal intrusion into your busy schedule. Using on-demand digital tools and professional drivers with a 97.7%1 on-time track record, we keep your back office running smoothly.	Our team of in-house OSHA and HIPAA experts provide deep knowledge when and where you want it. From online training to live audits to acute response, Stericycle partners with you to manage both day-to-day needs and unexpected situations.	From biohazardous and pharmaceutical waste to OSHA & HIPAA training to medical products, Stericycle offers an unparalleled breadth of services. Build a package that’s right for you, and we’ll grow our partnership alongside your business.

1. Stericycle annual data, 2020.

HIPAA Frequently Asked Questions

What does HIPAA stand for and what is its purpose?

HIPAA is an acronym for the Health Insurance Portability and Accountability Act. It is legislation that provides data privacy and security provisions for protecting medical information. HIPAA is intended to protect the privacy and security of patient confidentiality. The Privacy Rule, or Standards for Privacy of Individually Identifiable Health Information, establishes national standards for the protection of specific health information that is held or transferred in electronic form. For more information, review Understanding the Basics and Key Requirements of HIPAA Compliance.

Who must comply with HIPAA?

Healthcare providers such as hospitals, health clinics, doctors, nursing homes, pharmacies, dentists, psychologists, chiropractors and more must comply with HIPAA. HIPAA applies to healthcare providers, health plans, and healthcare clearinghouses if those organizations transmit health data electronically. For more information, review Understanding the Basics and Key Requirements of HIPAA Compliance.

What happens if an organization does not abide by HIPAA standards?

If an organization doesn’t comply with HIPAA standards, they are in violation with standards and provisions details in 45 CFR Parts 160, 162, and 164. There are hundreds of ways HIPAA rules can be violated, some common violations include:
•    Disclosing protected health information (PHI) without permission
•    Unauthorized access of PHI
•    Failure to terminate access rights to PHI when no longer required
•    Improper disposal of PHI
•    Failure to terminate access rights to PHI when no longer required
•    Theft of patient records
•    Failure to provide HIPAA training and security awareness training
For more information, review Understanding the Basics and Key Requirements of HIPAA Compliance.

Do I need to be HIPAA Certified or have a HIPAA Certification?

No, you do not need to be HIPAA certified and this is NOT a requirement set by HIPAA. There are also no programs that can make you HIPAA certified. This is a common misunderstanding that many healthcare professionals have. HIPAA only requires that you follow the guidance and meet the requirements set by the law. If you follow the rules and have proper documentation readily available, you are HIPAA compliant.