We use cookies to customise content for your subscription and for analytics. If you continue to browse Lexology, we will assume that you are happy to receive all our cookies. For further information please read our Cookie Policy.
Since November 2011, the U.S. Department of Health and Human Services (HHS), through its Office for Civil Rights (OCR), has been conducting audits of covered entities (the “HIPAA Audit Program”) for compliance with the privacy and security requirements under HIPAA and the HITECH Act (collectively, the “Privacy & Security Rules”
