Healthcare Innovation November 27, 2024
Office of Inspector General finds HIPAA audit implementation was too narrowly scoped to effectively assess electronic protected health information protections
The auditors at the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) got a taste of their own medicine recently, as an audit by the HHS Office of Inspector General found that OCR’s HIPAA audit implementation was too narrowly scoped to effectively assess electronic protected health information (ePHI) protections and demonstrate a reduction of risks within the healthcare sector.
In its report to Congress for calendar year 2022, OCR stated that it received 64,592 reported breaches affecting 42 million individuals and that the majority of the security incidents associated with these reported breaches were related to...