Athelas HIPAA Audit Checklist

Use this checklist to assess your practice’s HIPAA readiness.
Select your compliance level for each item to automatically calculate your score.

Administrative Safeguards

Administrative Safeguards checklist
Risk Analysis completed within 12 months
Documented Risk Management Plan exists
HIPAA Security Officer designated
Annual staff HIPAA training conducted
Incident response plan documented
Sanction policy in place
BAAs on file for all vendors

Physical Safeguards

Physical Safeguards checklist
Restricted facility access to PHI areas
Workstations secured and auto-lock enabled
Secure device/media disposal process

Technical Safeguards

Technical Safeguards checklist
Unique IDs and password protocols
Encryption of PHI at rest and in transit
Quarterly audit log reviews
Integrity controls prevent PHI alteration
No unencrypted PHI transmission

Organizational Requirements

Organizational Requirements checklist
Current HIPAA policies reviewed annually
Documented workforce sanctions process
Patient complaint process in place
Documentation retained for 6 years

Breach Notification

Breach Notification checklist
Breach assessment procedure defined
Patients notified within 60 days
Major breaches reported to HHS/media
Breach logs maintained for 6 years

Overall Compliance Score

High Risk—Immediate Action Recommended

0%

Score Interpretation

90–100%

Strong Compliance Foundation

70–89%

Moderate Risk—Review Identified Gaps

<70%

High Risk—Immediate Action Recommended

Schedule a Compliance Review