Post the Privacy Notice as required by HIPAA Privacy Rule
Provide individuals with an internal complaint process to discuss their concerns about how their protected health information is handled.
Provide an employee suggestion box to improve safeguards surrounding protected health information
Establish internal control procedures to ensure policies and procedures are being consistently implemented
Let employees know the consequences for non-compliance with HIPAA can result in termination
Document all changes to your HIPAA policy and procedure implementation plan.