OCR To Begin HIPAA Audits of Covered Entities and Business Associates

The HHS Office for Civil Rights (OCR) announced on March 21, 2016 that it has launched “Phase 2” of its HIPAA Audit Program.

OCR will audit the policies and procedures of both covered entities and their business associates.  OCR stated that the audits will be performed primarily as “desk audits” although some on-site audits may also be conducted.

Covered entities and business associates selected for audit will first receive an email requesting verification of its contact information.  OCR is alerting covered entities and business associates to check their Spam filters to ensure that the OCR emails are not inadvertently marked as Spam.

OCR stated that it will post updated audit protocols on its website as the time draws nearer for conducting the 2016 audits.   More information can be found on OCR’s website at:  http://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/audit/index.html.

Speak Your Mind