UltraAUDIT

Key Features

• Facilitates HIPAA Compliance
  
• Easy installation and Configuration
  
• Provides comprehensive and powerful report generation
  
• Modular system allows easy growth
  .

<- Back To Products Page

Next Product -> Ultra3D

UltraAUDIT HIPAA Compliance Manager

The UltraAUDIT solution enables any imaging facility (Hospital, Clinic, Teleradiology service, or other DICOM-based sites) to monitor and track study distribution and audit study access of Protected Healthcare Information (PHI). The solution assists in HIPAA compliance and supplies tools for a facility to track studies and their usage.

The UltraAUDIT product focuses on the following activities:

 

• Audit control – Record/Examine system activity
• Method of determining what studies have been generated versus ordered in the HIS/RIS
• Verify that all images are correctly distributed in PACS system (make sure all systems like QC, Diagnostic, Clinical Review and Archive all report same image counts and attributes)
• Verify that study information is consistent throughout PACS (study status, etc). 
• Provides configurable alarms for suspected incorrect usage or access
• Event reporting for Audit events on a timed or triggered basis
• Reporting
• Data Validation
• HIPAA reporting of collected Audit information
• Resource Utilization

 

The system is comprised of two components, the UltraAUDIT Compliance Server and UltraAUDIT Collection Agents.  The Compliance Server contains the Database (SQL Server), DICOM Modality Worklist Server, and the web based configuration system for management and reporting.  The Collection Agents are used to collect information from various components of the standard PACS/RIS system and populate the Compliance Server Database. 

UltraAUDIT and HIPAA - Health Insurance Portability and Accountability Act of 1996

The HIPAA Security and Privacy Standard defines administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of electronic protected health information (ePHI).

• Confidentiality – means that patient information cannot be shared or accessed by unauthorized personnel or other organizations
• Integrity – data verification of all images stored in local PACS and in redundant off-site archive.
• Availability – Redundant on-site and off-site archive with disaster recovery plan and optional immediate access to images (or other information).

HIPAA compliance focuses on the ability to audit what PHI data is generated, who accesses it, where it is sent and how securely is it stored.

Data Validation is an important part of all HIPAA compliance systems and procedures. The current DICOM and HL7 standards in Radiology are working towards automated solutions.

UltraRAD offers an Audit system (UltraAUDIT) that focuses on maximizing the standards commonly available by integrating with current PACS to collect HIPAA logs and events and presenting them in a single system.