Overview
Edward Zacharias warned that some of the targets for the Phase Two HHS Office of Civil Rights (OCR) HIPAA audits may be healthcare organizations that had earlier voluntarily complied with OCR data security breach reporting requirements. Using the database of entities with OCR relationships to pick audit candidates seems to be unfair to “good citizens” that dutifully reported breaches, Mr. Zacharias added. Read the full article.
