Following the Office for Civil Rights (OCR) recent publication of four settlements as part of a new Risk Analysis Audit Initiative. We explore the current regulatory language for Risk Analysis, the proposed language for Risk...more
4/16/2025
/ Compliance ,
Covered Entities ,
Data Breach ,
Enforcement Actions ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Security Rule ,
HIPAA Violations ,
OCR ,
Ransomware ,
Risk Assessment ,
Risk Management
On Sept. 23, the U.S. Department of Justice (DOJ) updated its Evaluation of Corporate Compliance Programs (ECCP)1 guidance document for prosecutors to consider the impact of emerging artificial intelligence (AI) technology on...more
On May 16, 2023, the U.S. Department of Health and Human Services (DHHS) through the Office for Civil Rights (OCR) announced a settlement of potential violations of the Health Insurance Portability and Accountability Act...more
9/14/2023
/ Business Associations ,
Corrective Action Plans (CAPs) ,
Data Breach ,
Department of Health and Human Services (HHS) ,
Hackers ,
HIPAA Violations ,
OCR ,
PHI ,
Risk Management ,
Settlement ,
Subcontractors