HIPAA

CGI offers comprehensive services to assist healthcare organizations in complying with the Health Insurance Portability and Accountability Act of 1996. Our three-phased approach to HIPAA—education, assessment and remediation—not only helps to ensure compliance, but also identifies opportunities for using HIPAA to create strategic competitive advantages.

Phase 1: HIPAA education

CGI offers comprehensive online and onsite HIPAA education that can be customized based on the needs of each client. We can begin with a high-level discussion of the law appropriate for all levels of staff and then move through mid-level training to a detailed program designed for technical and compliance staff.

CGI's HIPAA curriculum covers:

• HIPAA overview
• Transactions, code sets and national identifiers
• Security regulations
• Privacy regulations

CGI's in-depth knowledge of HIPAA and its impact on all healthcare organizations, including payers, providers, health plans and clearinghouses, is based on our long-standing work in the healthcare industry, our participating in leading industry standard groups, such as ANSI, HL7 and SNIP and our extensive HIPAA compliance experience.

Phase 2: HIPAA assessment

CGI's focused HIPAA assessment process identifies a healthcare organization's compliance risks and potential opportunities for gaining competitive advantages under HIPAA. Leveraging our proprietary assessment tools and methodologies, we develop a gap analysis and provide a detailed blueprint for compliance with all of HIPAA's provisions, including:

• Transactions, code set and national identifier provisions
• Security provisions
• Privacy provisions

Phase 3: HIPAA remediation

CGI's HIPAA remediation services assist healthcare organizations in modifying their business operations and information systems to comply with HIPAA requirements. CGI's remediation services cover each stage of remediation, including planning, design, implementation and testing. We deliver innovative solutions in the following areas:

• Transaction sequencing to meet system readiness dates proposed by WEDI/SNIP
• HIPAA compliance coding
• Systems design and implementation
• Systems testing