Becker's Healthcare November 26, 2024
The U.S. Department of Health and Human Services is meeting the minimum requirements for auditing health organizations’ data privacy practices, but a recent report shows there’s more work to be done to protect patient data.
Cyberattacks on healthcare providers and vendors have increased in recent years, often exposing sensitive patient information. HIPAA requires healthcare organizations to protect patients’ electronic health data, implement safeguards, and notify patients if their information is breached. The HHS Office for Civil Rights is responsible for enforcing these rules.
The HHS Office of Inspector General reviewed the OCR’s health data privacy audits from 2016 to 2020. While the audits assessed some aspects of data protection, the investigations in 2016 and 2017 only...