Skip Navigation

AHIMA Practice Brief Adds Insurance Issue

Bookmark and Share

The recently revised Document Destruction Practice Brief published by the American Health Information Management Association (AHIMA) has added two recommendations that HIPAA covered entities include insurance provisions in the business associate (BA) contracts. The first recommendation is to require the destruction service provider to accept the liability for financial damages resulting from breaches any information breach caused by the service. The second new recommendation is that the service provider be required to carry the appropriate type of Professional Liability Insurance coverage to cover such an incident.

Neither HIPAA nor Health and Human Services (HHS) require indemnification or insurance coverage by BAs. The AHIMA Document Destruction Practice Brief is simply a guideline produced for their 60,000 members.