May 13, 2021

Volume XI, Number 133

Advertisement

May 13, 2021

Subscribe to Latest Legal News and Analysis

May 12, 2021

Subscribe to Latest Legal News and Analysis

May 11, 2021

Subscribe to Latest Legal News and Analysis

Office of Civil Rights Hones in on Smaller HIPAA Breaches

The U.S. Department of Health and Human Services, Office of Civil Rights (“OCR”), the agency tasked with enforcing the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), recently announced that it will redouble its efforts to investigate smaller breaches of Protected Health Information (“PHI”) that affect fewer than five-hundred (500) individuals.

It has been widely known that OCR opens an investigation for every breach affecting more than 500 individuals; this announcement describes OCR’s new initiative to investigate smaller breaches as well.  OCR stated that in determining when it will open an investigation, it will evaluate a number of factors, such as: (1) the size of the breach, (2) whether the PHI was stolen or improperly disposed of, (3) whether an entity reports multiple breaches, (4) whether numerous entities are reporting breaches of a particular type, and (5) whether the breach involved unauthorized access to an IT system.  The announcement also notes that OCR may consider lack of breach reports for a region, suggesting that OCR is interested in investigating the potential of under reporting.

The announcement emphasized that OCR can determine both large scale trends among HIPAA regulated entities, and entity-specific compliance issues that must be addressed by investigating breaches.  The announcement also serves as a warning to persons and/or entities subject to HIPAA to ensure that their breach reporting and other HIPAA compliance efforts are up-to-date and ready to withstand any potential scrutiny from OCR.

Advertisement
©2021 Epstein Becker & Green, P.C. All rights reserved.National Law Review, Volume VI, Number 235
Advertisement
Advertisement

TRENDING LEGAL ANALYSIS

Advertisement
Advertisement

About this Author

Epstein Becker Green has served as a thought leader in the health care industry for more than 40 years. Our attorneys guide clients through complex litigation, corporate transactions, government investigations, FDA and regulatory compliance, privacy and security law, and more.

Health care is in our genes. The breadth of experience delivered by our Health Care and Life Sciences practice—to all players throughout every sector of the health care delivery system—sets us apart. We know the industry inside and out. You might say, it’s in our genes.

312.499.1421
Advertisement
Advertisement