Healthcare DIVE November 26, 2024
The HHS’ Office for Civil Rights’ audit program was too narrow in scope to effectively assess data protections and reduce cyber risks in the healthcare sector, according to the report.
Dive Brief:
- The Office for Civil Rights, which oversees HIPAA enforcement, should improve its program for auditing compliance with the privacy and security law, according to a report published Monday by the HHS’ Office of Inspector General.
- Though the OCR fulfilled its requirements to conduct periodic HIPAA audits, the program was too narrow in scope to effectively assess organizations’ protections for health data and reduce risks, according to the OIG.
- Overall, the audits weren’t effective at improving cybersecurity at healthcare companies and their business associates — a...
Today's Sponsors
Today's Sponsor