Managing HIPAA obligations with Riskophia
Health Insurance Portability and Accountability Act (United States)
What it is
The United States federal law whose Privacy, Security and Breach Notification Rules govern protected health information held by covered entities and their business associates.
Who it applies to
US covered entities (providers, health plans, clearinghouses) and the business associates that handle protected health information for them, including Canadian technology and service companies with US healthcare customers.
Representative obligations
- Privacy Rule policies and the notice of privacy practices
- Security Rule administrative, physical and technical safeguards
- Risk analysis and risk management
- Workforce training and sanctions
- Business associate agreements
- Breach notification to individuals, HHS and, where required, the media
This list is illustrative and is not legal advice. Your obligations depend on your activities, jurisdictions and the current text of the law.
From HIPAA text to evidence on file.
Riskophia helps you manage the compliance activities associated with HIPAA. It does not by itself make you compliant or approved; that depends on your practices and on the relevant regulator.
Requirements register
HIPAA obligations broken into plain-language requirements with owners, cadence and status.
Policies and attestations
Policy templates aligned to HIPAA, version controlled and acknowledged by the right roles.
Training records
Mandatory training assigned by role through Learnophia, with completion recorded as evidence.
Evidence and gaps
Evidence linked to each requirement; gaps become owned actions with verified closure.
Crosswalk
Where HIPAA overlaps other regulations and standards, one control and one piece of evidence serve all of them.
Export
An inspection-ready package of status, evidence and history for HIPAA.
See your HIPAA obligations in Riskophia.
Book a 30-minute demo led by a compliance professional, or talk to an expert about your sector.