Skip to main content

How to Complete Accountable's Data Inventory

It is an annual requirement of your HIPAA Compliance plan to complete a Data Inventory and in this article we explain how to do that.

Jacob W Fisher avatar
Written by Jacob W Fisher
Updated over 4 months ago

Data Inventory

This short video, accompanied with some explanatory text, will answer any questions you may have regarding the Data Inventory


It is an annual requirement complete a Data Inventory

To begin to address your data inventory, please select the menu item to your left labeled compliance and select data inventory in the drop-down which follows.

access data inventory

Once you are on the page for the data inventory, look to your upper-right for a blue button that is labeled add inventory.

add inventory


How to fill the Inventory fields

data inventory form 1

In the name field, be sure to list any Internet of things devices that have the ability to touch protected health information at any given time.

It does not matter if you are not storing PHI on a local device or server.

If any given device can touch that protected health information, we are simply accounting for it here. Be it company owned or a personally owned device, we're making another notch on our tally.


Under inventory ID: Feel free to put some hash marks in that field. There's a fair chance that this will not apply to you. If you are serializing your hardware, feel free to place inventory IDs in this field.

Estimated Records: You want to lean heavily on the fact that this says estimated. It's a very hard number to list because it is fluid in nature. This is why when completing this field you should give a range starting with zero. The top end of your range would be however many individual records you have the ability to touch with the hardware listed in the first field (Name).

Location: Please type in the city and state where these devices will primarily be touching protected health information.

Location Type: First, please notice the default status of 'physical' is selected. Please ignore this drop down and leave the option of physical as is.

Data Stored: This next answer is real easy. Simply put phi. Protected health information is our largest risk factor and what we are taking steps to protect. Phi is the only answer needed here.


(Instructions for completing the bottom of the form are under the picture)

]

Risk Level: Please mark risk level as low, as it has no effect anywhere else inside of Accountable and move along in this audit.

Contact Information: The person completing this audit will want to list their email, their first name and their last name.

Finalizing: Click create inventory to save your work and be done with this audit until it requires completion in a year's time.


✅ Check out further examples of articles we have on the HIPAA compliance process. For example, there's this article on how to report an incident

❓ Still have questions? Please email us! We are happy to help!

Did this answer your question?