HPA Overview

HIPAA Privacy compliance is tough - HPA can help

For covered entity organizations, the HIPAA privacy regulations have introduced at least 500 new compliance requirements. In an era of shrinking budgets and staff, health-care related organizations must now contend with this complex set of laws, all with the looming threats of non-compliance, including bad publicity, fines and even prison. With the Office for Civil Rights receiving almost 25,000 HIPAA privacy complaints per year, the need to comply with every aspect of the HIPAA privacy regulations is greater than ever.

Health Privacy Accelerator (HPA) is designed with the challenges and costs of privacy compliance in mind. HPA enables organizations to easily manage their HIPAA privacy compliance requirements and associated costs through the use of its sophisticated HIPAA-specific request management and process automation features. With over 50 screens dedicated to simplifying HIPAA Privacy compliance, HPA is the most comprehensive HIPAA privacy software product available.

HPA currently serves the health privacy compliance needs of over 500 provider, payer, and governmental organizations worldwide.

To find out more about HPA or why our customers use HPA, see the HPA Features or Why HPA sections below, or contact us for an online demonstration.

HPA Features

Health Privacy Accelerator (HPA) v3

HIPAA Privacy Disclosure Management

The ability to accurately track, maintain and report on patient disclosures is a critical HIPAA Privacy requirement. HPA provides a complete set of disclosure management features for such purposes, including disclosure recording, disclosure approval routing, disclosure file import, disclosure accounting, disclosure accounting suspension, and disclosure restrictions.

HIPAA Privacy Request Management

Covered entities are required to accept, fulfill and process many different types of requests under HIPAA. HPA provides an extensive request management system for documenting, routing and fulfilling HIPAA Privacy-related requests from individuals and organizations. These include requests for PHI access, PHI amendment, disclosure accounting, confidential communications, privacy & security complaints, and alternative address.

Administrative Management & Reporting

The ability for administrators to centrally manage and report on HIPAA privacy is critical. As such, HPA provides various online reports, including a graphical Dashboard screen that provides real-time information on an entity's HIPAA activities and status. This includes graphs and charts for overdue requests, total disclosures made by type, total requests by requester, etc. Furthermore, administrators can centrally configure every major element of HPA. This includes items such as disclosure types, authorization types, NPP versions, reference codes, users, user permissions, organizations, etc.

Correspondence Management

The ability to automatically generate correspondence in a variety of situations is a critical cost saving factor for providers. HPA can automate the creation of any type of correspondence to patients, payers, etc. The system comes pre-configured with over 30 letter templates that can be easily customized and used. Upon implementation, any patient-specific letter can be generated on demand.

Automated Task Routing

HPA uses a sophisticated task routing system and rule-based workflow to automate and simplify many of the procedures associated with HIPAA privacy. In the case of disclosures of health information, for example, HPA can electronically "route" a request for a disclosure from the "clerk" that receives the request, to the "administrator" that approves or denies the disclosure request. This ability to route HIPAA privacy related tasks can occur between individual employees or groups of employees, even at different physical locations. This helps to reduce a covered entity's operating costs by replacing traditionally manual procedures with automation.


The security of health related information is critical. As such, HPA uses a very sophisticated security model that controls both user authentication (login) and user authorization (to product features and data). Moreover, the standard implementation of HPA is the only one that adheres to the stringent US Department of Defense standards. HPA also includes an extensive audit trail that records every interaction and operation of the application.

External Systems Integration

The ability to integrate with external systems is a critical time-saving feature for covered entities. HPA can, for example, integrate with external admissions, eligibility, claims, HIM, or legacy systems. This allows HPA to seamlessly work and integrate with other products. HPA also provides facilities for master patient indexing, where a patient's HPA record can be tied to multiple external systems and/or identifiers.

Industry Specific Implementations

HPA can be deployed in one of two industry-specific implementations, each offering features that are designed for that industry (such as letter templates). The two implementations are for providers or payers.

Why HPA?

Organizations like the Department of Defense Military Health System selected Health Privacy Accelerator (HPA) because it is the premier application for the privacy provisions of HIPAA. Consider the advantages that HPA customers maintain:

Comprehensive Functionality

HPA is the most comprehensive HIPAA privacy product available. The application consists of over 50 screens with extensive features including disclosure recording, disclosure file import, disclosure restrictions, disclosure accounting, disclosure accounting suspension, designated record set definition, PHI access, PHI amendment, authorization management, notice of privacy practices management, confidential communications management, privacy complaint processing, HIPAA letter generation, document management, workflow management, rule-based decision support, external system integration, etc.


HPA is designed to help ease the burden and cost of compliance. While no software alone can make a covered entity compliant with HIPAA privacy, a well-designed application can certainly help reduce the associated time-frames and costs. For example, HPA automates and simplifies what would otherwise be manual policies and procedures through the use of a rule-based workflow engine. In the case of complex procedures like PHI access, disclosure accounting, complaint management, etc. the workflow engine can automatically "route" required tasks between participating users, record all necessary data at each stage of the procedure, and generate the appropriate outcome or correspondence letter(s).

Proven Track Record

The first version of HPA went in to production over ten years ago. Now at version 4, it is truly the most reliable, comprehensive, and widely used software product available for the privacy provisions of HIPAA. HPA currently supports millions of individuals, thousands of users, and many very satisfied customers. Contact us today for an online demonstration.