Lexology May 5, 2022
Just one month remains to comment on the U.S. Department of Health and Human Services (HHS) Office for Civil Rights’ (OCR) current Request for Information (RFI), which seeks public input on the implementation of two statutory provisions related to HIPAA:
- (1) How HIPAA-covered entities and business associates can adequately demonstrate the adoption of “recognized security practices” when OCR considers potential violations of the HIPAA Security Rule; and
- (2) How to distribute to harmed individuals portions of penalties and settlement amounts it collects.
Organizations may wish to comment in order to advocate for practical means of demonstrating the adoption of sound security practices and address thorny issues surrounding who is “harmed” and how they should be compensated, which could...
Today's Sponsors
Today's Sponsor