President and key personnel for healthcare provider should attend
Workshop #1 to obtain an understanding of what HIPAA is, its lingo,
and the penalties for non-compliance.
Ask questions about and become familiar with HIPAA.
Based on the size and current structure of the healthcare provider,
determine whether the healthcare provider would be best served by
one or more persons serving as CPO for the healthcare provider.
Establish, in written format, its expectations of the CPO's job
responsibilities.
Begin thinking about assessment - where is the PHI located and
how does it flow.