HHS Finds OCR Did Not Meet all Requirements for Enforcing HIPAA

The Department of Health and Human Services's Office of Inspector General recently issued a report titled "The Office for Civil Rights Did Not Meet All Federal Requirements in its Oversight and Enforcement of the Health Insurance Portability and Accountability Act Security Rule". The report stated that:

"OCR met some Federal requirements for oversight and enforcement of the Security Rule. OCR made available to covered entities guidance that promoted compliance with the Security Rule and OCR established an investigation process for responding to reported violations of the Security Rule. OCR also followed Federal regulations when imposing penalties for Security Rule violators. However, OCR did not meet other Federal requirements critical to the oversight and enforcement of the Security Rule..."

To read more, click here.