COMPLIANCE & PRIVACY SERVICES
A compliance program that holds up before regulators come looking.
Federal and state regulatory requirements for healthcare compliance and privacy have never been more complex or more consequential. KHC provides high-value, actionable compliance and privacy consulting aligned with current regulatory requirements, from new program development through OCR inquiries, CIA support, and ongoing advisory assistance.
Build a compliance program that withstands scrutiny.
Whether your organization is implementing a new compliance or privacy program from scratch, reviewing and strengthening an existing one, responding to a regulatory inquiry from the Office for Civil Rights, or entering into a Corporate Integrity Agreement with the OIG, the standard for what constitutes an adequate compliance program has never been higher. KHC provides the expertise to meet that standard, tailored to your facility type and regulatory environment.
Risk Assessments and Gap Identification
Every effective compliance program begins with an honest assessment of where the organization stands and where it's exposed. KHC performs fundamental and comprehensive risk assessments and surveys that identify regulatory gaps, prioritize remediation efforts, and provide the documentation that demonstrates good faith compliance effort to regulators. Our assessments are designed to be both thorough and actionable, not reports that sit on a shelf.
Privacy Program Development in a Regulatory Environment
Federal HIPAA and State privacy requirements demand more than just policy documents. They require an operational infrastructure and a compliance and privacy culture that protect patient, consumer, and employee information at every point of contact, including vendor relations, regulatory inquiries, law enforcement, and requests for patient information. KHC analyzes the contracting life cycle, including Business Associate Agreements, conducts Privacy Impact Assessments, routine privacy rounds, comprehensive data breach investigations, and breach risk assessments, and develops and manages privacy and monitoring and auditing program work plans that a defensible and compliant program requires.
When responding to an Office of Inspector General (OIG) or state regulator visit or inquiry, the organization's response needs to be immediate, mindful, coordinated, and accurate. KHC provides direct support for federal and state inquiries and audits, managing the response process, working with key business stakeholders, identifying, preparing, and reviewing documentation for submission, and representing your organization's compliance and privacy posture clearly and credibly to regulators.
Interim Staffing and Compliance Officer Mentorship
Compliance Officer vacancies create immediate regulatory exposure, particularly for organizations under active OIG or OCR oversight. KHC provides interim and outsourced compliance and privacy staffing that maintains program continuity during leadership transitions, as well as training and mentorship for recently hired Compliance and Privacy Officers who need experienced guidance to navigate the role's demands and the organization's specific regulatory obligations.
We don't just consult on healthcare. We've worked inside it.
KHC's compliance consulting staff includes professionals who have operated compliance programs from the inside and understand what regulators actually look for when they audit one.
Our team includes:
Certified Compliance Officers • Certified Privacy Officers • Investigation Specialists • Vendor Contracting Analysts • Registered Nurses & Clinical Professionals • Certified Coders • CPAs
What a Compliancy and Privacy engagement covers:
Services are aligned with federal and state regulatory requirements and tailored to your facility.
PROGRAM DEVELOPMENT
- Fundamental and comprehensive risk assessments and surveys
- Compliance and privacy program development and implementation
- Work plan development
- Policy and procedure development and implementation
- Governance infrastructure development
- Program and regulatory reporting processes
- Standard investigation protocol development
PRIVACY & INVESTIGATIONS
- Compliance and privacy investigation management
- Breach risk assessments
- Remediation plan development and facilitation
- Business Associate Privacy Impact Assessments
- Routine privacy checks
- OCR inquiry and audit support
MONITORING & SUPPORT
- Auditing and monitoring initiatives
- Annual and targeted client training and education
- CIA and regulatory inquiry support
- Interim and outsourced compliance staffing
- Compliance Officer training and mentorship
- Deposition and litigation support
- Compliance and privacy advisory assistance
Does your compliance program meet all the requirements?
A KHC consultant can assess your compliance and privacy program, identify high-risk gaps, and outline what an engagement would look like. Don't wait for a regulatory inquiry to find out where your program falls short.
