In examining how the Office of Civil Rights administered its periodic Health Insurance Portability and Accountability Act audit program from January 2016 through December 2020, the U.S. Department of ...

The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) must take significant steps to enhance its HIPAA audit program to ensure stronger protection of electronic ...

The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) is required by law to perform periodic audits of covered entities and business associates to ensure their compliance ...

HIPAA enforcement is tightening, with OCR ramping up audits and investigations that focus heavily on ransomware preparedness, risk analysis, and business associate oversight. Covered entities and ...

Recognizing the increasing number of successful cyberattacks targeting health care organizations and their valuable patient data, the Office of the Inspector General (OIG) is calling for enhancements ...

The HHS’ Office for Civil Rights’ audit program was too narrow in scope to effectively assess data protections and reduce cyber risks in the healthcare sector, according to the report. The report, ...

We collaborate with the world's leading lawyers to deliver news tailored for you. Sign Up for any (or all) of our 25+ Newsletters. Some states have laws and ethical rules regarding solicitation and ...

Ambulatory surgery centers will be included in audits as part of a HIPAA audit program initiated by the U.S. Department of Health & Human Services’ Office for Civil Rights, according to a report in ...

Linda Sanches, OCR senior adviser, discusses compliance audits at HIPAA conference. Will the Department of Health and Human Services under the Trump administration create a permanent HIPAA compliance ...

The Department of Health and Human Services awarded a contract worth more than $9 million to consulting firm KPMG to assist the Office of Civil Rights in the setup of a HIPAA audit program, according ...

The HIPAA program periodically audits processes, controls and policies of selected covered entities for compliance with HIPAA’s privacy and security rules and breach notification standards, as ...