We use cookies to customise content for your subscription and for analytics. If you continue to browse Lexology, we will assume that you are happy to receive all our cookies. For further information please read our Cookie Policy.
Last month, we reported that it was being widely reported that HIPAAHITECH Act Omnibus Final Rule would be issued in March 2012, but that it had not yet been submitted to the Office of Management and Budget for review under Executive Order 12866
Since November 2011, the U.S. Department of Health and Human Services (HHS), through its Office for Civil Rights (OCR), has been conducting audits of covered entities (the “HIPAA Audit Program”) for compliance with the privacy and security requirements under HIPAA and the HITECH Act (collectively, the “Privacy & Security Rules”
