Pharmacy HIPAA compliance checklist

Independent Pharmacy | PublicProof Academy working document

Sets up the privacy, security and breach basics a pharmacy covered entity needs, without sending PHI to anyone who lacks a business associate agreement.

Business

State or jurisdiction

Prepared on

Owner

Official source saved

Next review

Program setup

Privacy officer and security officer named
Notice of Privacy Practices posted and offered
Security risk assessment completed and dated
Written privacy, security and breach policies adopted
Business associate agreements signed with software, IT, shredding and delivery vendors
Confirm no PHI is sent to PublicProof or any vendor without a BAA

Daily safeguards

Counseling area protects conversations
Screens and will-call bags protect patient names
Fax and e-mail destinations verified
PHI shredded, never thrown in trash
Workforce training completed and logged

Use rule: Education and organization only. Record the agency, official source, checked date, cost, proof saved and responsible person for every consequential requirement. Unknown means stop and confirm. Example rows are labeled EXAMPLE and are not your data.