One thing is certain. You don't want to wait until you receive a notification letter from OCR before you begin preparing for a HIPAA audit, says Dena Boggan, CPC, CMC, CCP, HIPAA privacy/security officer at St. Dominic Jackson Memorial Hospital in Jackson, Miss.
Some healthcare administrators and executives consider the notice of privacy practices (NPP) another government administrative burden. From a privacy perspective, however, the NPP is not a waste of time.