Lexology April 3, 2024
Background
The U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) recently published an executive summary (Report) outlining key enforcement activities of the Health Insurance Portability and Accountability Act (HIPAA) in 2022. In accordance with the Health Information Technology for Economic and Clinical Health (HITECH) Act, OCR is tasked with annually reporting to Congress on HIPAA Privacy, Security, and Breach Notification Rule Compliance. This authority includes detailing the volume of complaints received, the resolution methods, compliance reviews initiated, outcomes of these reviews, audits conducted, summaries of audit findings, the issuance of subpoenas or inquiries, and planned compliance and enforcement initiatives.
Impact and Enforcement
The Report demonstrated a marked rise in HIPAA complaints (17% increase from 2018...