We use cookies to customise content for your subscription and for analytics. If you continue to browse Lexology, we will assume that you are happy to receive all our cookies. For further information please read our Cookie Policy.
The Office for Civil Rights (OCR) at the Department of Health and Human Services recently published its audit protocol for assessing compliance with the Privacy, Security, and Breach Notification Rules under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), as amended by the Health Information Technology for Economic and Clinical Health Act (HITECH
