To help regulated entities better comply with the requirements of the HIPAA Privacy, Security, and Breach Notification Rules, the HHS Office for Civil Rights (OCR) is sharing two Reports to Congress for 2021, on HIPAA Privacy, Security, and Breach Notification Rule Compliance and Breaches of Unsecured Protected Health Information. These reports, delivered to Congress February 17, 2023, may benefit regulated entities to assist in their HIPAA compliance efforts. The reports also share steps taken by OCR to investigate complaints, breach reports, and compliance reviews regarding potential violations of the HIPAA Rules. The reports include important data on the numbers of HIPAA cases investigated, areas of noncompliance, and insights into trends such as cybersecurity readiness.
