Healthcare IT News November 27, 2024
The Office of Civil Rights could have initiated follow-up after discovering security flaws, but “rarely initiated these reviews when it identified serious compliance issues,” according to the HHS inspector general’s audit program review.
In examining how the Office of Civil Rights administered its periodic Health Insurance Portability and Accountability Act audit program from January 2016 through December 2020, the U.S. Department of Health and Human Services’ Office of Inspector General found that OCR was largely ineffective in preventing health information breaches, a new report suggests.
After evaluating OCR’s program for performing periodic HIPAA audits, OIG recommended expanding the scope to better execute on HITECH Act of 2009 requirements, which extended criminal and civil penalties to business associates of covered...