cognitive cybersecurity intelligence

News and Analysis

Search

OCR’s HIPAA audit program lacked mettle, OIG says

The Office of Civil Rights (OCR), an agency of the U.S. Department of Health and Human Services, has been ineffective at preventing health information breaches due to narrow audits, says a report from the Office of Inspector General (OIG). From 2016 to 2020, OCR reviews only covered eight of 180 HIPAA rules requirements. OIG recommends expanding its scope to comply with the HITECH Act of 2009, documenting deficiencies in a timely manner, and assessing compliance with HIPAA. OCR agreed with the first and last recommendation.

Source: www.healthcareitnews.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts