Lexology May 2, 2024
The Department of Health and Human Services (HHS) Office of Civil Rights (OCR) will use all its tools, including reviving the HIPAA compliance audit, to enforce compliance with the HIPAA Security Rule as it applies to covered entities and business associates. The last phase of audits, conducted between 2016 and 2017, consisted of documentation requests that uncovered many entities’ failure to implement a risk analysis and risk management program, among other deficiencies. As noted in the HIPAA Summit Recap, HHS intends to move forward with a crucial new risk analysis initiative. In addition, OCR will focus on HIPAA Security Rule compliance related to organizations’ use of tracking technologies such as pixels and SDKs as an enforcement priority.
The likelihood of...
Today's Sponsors
Today's Sponsor