Services
Virtual HIPAA privacy officer and security officer services
HIPAA requires every practice to name a Security Officer, and covered entities a Privacy Officer too. Many small practices give the role to someone with no security or privacy training. You can name ours, or add hands-on help from a compliance consultant. Every service works with any Polestar GRC plan.
HIPAA security officer services and privacy officer services
A named officer on your documentation, with a quarterly review call.
Security Officer
$750 a month
A named Security Officer for your organization.
- A named Security Officer on your documentation
- Quarterly security review call
- Help with security incidents during business hours. We reply within one business day.
Privacy Officer
$750 a month
A named Privacy Officer for your organization.
- A named Privacy Officer on your documentation
- Quarterly privacy review call
- Answers on patient-rights and disclosure questions within one business day
Both Officers
$1,200 a month
Save $300 a month
Both named roles, with one combined review.
- Everything in both roles
- One combined quarterly review
- One contact for both roles, by email or a scheduled call. We reply within one business day.
Available with any plan. These are named-officer designations with a quarterly review; the full-service options below do the ongoing work. Incident, audit and regulator-response work is billed separately at $350 an hour (see Audit Response below).
Consulting
A review of your risk assessment, monthly advisory hours, a full-service Privacy Officer, or help with an audit.
One-Time Review
$750 per session
A 1-hour video call with a written summary.
- Review of your SRA responses
- Compliance gap analysis
- Remediation recommendations
- Written summary report
- Available to all plans
Monthly Advisory
$2,500 a month
4 hours of guidance each month.
- Monthly compliance review
- Email questions answered within one business day; phone calls by appointment
- Policy review assistance
- Incident response guidance during business hours
- Calls scheduled within 2 business days of your request
Full-service Privacy Officer
$4,500 a month
Ongoing Privacy Officer work for your organization, by appointment during business hours.
- Named Privacy Officer
- Policy maintenance and updates
- Training oversight
- Board reporting
- Audit preparation
- Answers to your workforce's privacy questions within one business day
Audit Response
$350 an hour
Scheduled support for OCR audits and breach follow-up.
- OCR audit preparation
- Breach response assistance, alongside your lawyer and cyber insurer
- Documentation review
- Remediation planning
- Work starts within 2 business days of your request, during business hours
How services work
- Services are by appointment, Monday to Friday, during US Pacific business hours. We do not offer 24/7 or on-call response. Questions get a reply within one business day.
- Officers and consultants provide compliance program support, not legal advice. For a suspected breach, also call your lawyer and your cyber insurer.
- Designating our officer does not transfer your organization's HIPAA obligations; you remain responsible for implementing your policies.
Or email support@polestargrc.com.