Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the HIPAA Compliance topic
No spam. Unsubscribe anytime.
Van Buren County discusses HIPAA compliance options, vendor quotes and next steps
Summary
County officials reviewed HIPAA compliance options and compared ISAC’s tools with a vendor proposal that would provide more hands-on administration; vendor list prices were quoted at $9,540 (basic) and $16,003.90 (select) with an ISAC credit that reduces first-year costs.
County officials spent a portion of the meeting reviewing options for HIPAA compliance support and comparing the services ISAC offers with a vendor proposal that would perform administrative assessments and set up required agreements.
Speaker 3 said the county had signed up for ISAC’s program in June for a FY26 rate of $1,950 and described the difference between ISAC and the vendor (referred to in the transcript as Khorosh/Karoche). According to Speaker 3, ISAC provides tools and training the county must implement internally, while the vendor would take on much of the administrative burden, perform assessments, and set up business associate agreements on the county’s behalf.
Speaker 3 detailed vendor pricing and service levels: "you look at the prices, 1 thing they mentioned was that, where it's $9,540 or for this basic and select a $16,003.90" (list prices). Because the county already paid ISAC for FY26, the vendor indicated it would credit that amount in year one, which Speaker 3 said would reduce the first-year net cost to roughly $8,000 for the basic package and about $15,000 for the select package. The select option was described as including a dedicated consultant and more vendor-led implementation, shifting much of the setup time from county staff to the vendor.
Speakers asked whether the county had experienced any HIPAA incidents; Speaker 3 said there had been none. The board discussed reaching out to nearby counties (Henry, Mahaska, Wapello, Washington) to gather peer experience and assess whether the vendor's services had been helpful for other counties before scheduling a formal vendor presentation. Speaker 3 said they would send follow-up emails and would not schedule a presentation immediately; the board tentatively agreed to gather peer feedback first.
No procurement decision or vendor contract was approved at the meeting. The discussion was framed as a next-step evaluation with staff directed to consult peers and report back; a formal presentation by the vendor may be scheduled at a later meeting if the board requests it.
