HIPAA Consulting Vendors Often Misinterpret a Key Compliance Requirement

David Gacioch, Edward Zacharias and Amy Pimentel co-authored a McDermott Special Report, “The Continuing Disconnect between the Health Care Industry and OCR on HIPAA’s Risk Analysis Requirement,” cited here