HIPAA Compliance and Enforcement — Corrective action / RA

Full description

Navigate to: HIPAA for Professionals Regulatory Initiatives Privacy Summary of the Privacy Rule Guidance Combined Text of All Rules HIPAA Related Links Security Security Rule NPRM Summary of the Security Rule Security Guidance Cyber Security Guidance Breach Notification Breach Reporting Guidance Reports to Congress Regulation History Compliance & Enforcement Enforcement Rule Enforcement Process Enforcement Data Resolution Agreements Case Examples Audit Reports to Congress State Attorneys General Special Topics Parental Access Mental and Behavioral Health Change Healthcare Cybersecurity Incident FAQs HIPAA and COVID-19 HIPAA and Reproductive Health HIPAA and Final Rule Notice HIPAA and Telehealth HIPAA and FERPA Research Public Health Emergency Response Health Information Technology Health Apps Patient Safety Covered Entities & Business Associates Business Associate Contracts Business Associates Training & Resources FAQs for Professionals Other Administrative Simplification Rules Substance Use Disorder Confidentiality HIPAA Enforcement HHS’ Office for Civil Rights is responsible for enforcing the Privacy and Security Rules. Enforcement of the Privacy Rule began April 14, 2003 for most HIPAA covered entities. Since 2003, OCR's enforcement activities have obtained significant results that have improved the privacy practices of covered entities. The corrective actions obtained by OCR from covered entities have resulted in systemic change that has improved the privacy protection of health information for all individuals they serve.HIPAA covered entities were required to comply with the Security Rule beginning on April 20, 2005. OCR became responsible for enforcing the Security Rule on July 27, 2009.As a law enforcement agency, OCR does not generally release information to the public on current or potential investigations.Enforcement ProcessLearn how OCR enforces the Privacy and Security Rules and learn what OCR considers during its initial intake and review of a complaint. A flow diagram shows the HIPAA Complaint Process.Enforcement HighlightsSee a summary of OCR’s enforcement activities and up to date monthly results, including the number of cases in which corrective action was obtained, no violation was found, or other resolutions were achieved.Enforcement DataView our annual numbers of enforcement cases shown nationally and by state.Case Examples and Resolution AgreementsView examples of the corrective actions OCR has obtained from covered entities.Back to Top Content last reviewed July 25, 2017