Our recommendations to achieve HIPAA compliance The HIPAA law covers thousands of pages. As you would expect, Congress can never do something simply. As the law developed many people had input as to how it should work, what information should be protected and who should be covered, affected & compliant. Most smaller firms do not need to waste the money on a GAP analysis to see what procedures need to be changed. It is easier and cheaper just to alter current procedures and implement the new HIPAA methods. All healthcare providers are affected in one way or the other by the new HIPAA regulations. The easiest and cheapest method of implementing the new HIPAA regulations is a step by step process, beginning with recognizing how your firm is currently doing things and how procedures should be changed. Many of your firm's current procedures are probably already HIPAA compliant; they just need to be documented. Our approach looks at the the end of the process. If and when the day comes that your firm must demonstrate that you are HIPAA compliant, what materials and documentation will you need to defend your level of HIPAA compliance?