Have the “HIPAA Police” Finally Arrived? HHS Launches Formal Audit Program
The U.S. Department of Health and Human Services Office for Civil Rights (“OCR”) announced last week that it has begun formal auditing of covered entities under HIPAA. The action is not unexpected; the American Recovery and Reinvestment Act of 2009 (“ARRA”) required OCR to conduct the audits. However, the announcement, along with ARRA’s increased penalties for not complying with HIPAA, may cause covered entities and business associates to refocus on HIPAA’s requirements.
Comments