Summary of OCR’s 2017 HIPAA Enforcement Activities

In 2017, the Department of Health and Human Services’ Office of Civil Rights (“OCR”) continued its HIPAA enforcement efforts, resulting in over $19,393,000 in settlements and civil monetary penalties. OCR investigations focused on various issues, including...

OCR ANNOUNCES INCREASED INVESTIGATIONS OF SMALL HIPAA BREACHES

On August 18, 2016, the Department of Health and Human Services’ Office for Civil Rights (“OCR”) announced its intention (via its email list-serv) to “more broadly investigate” breaches of protected health information (“PHI”) affecting fewer than 500 individuals....