Enforcement ProcessOCR enforces the Privacy Rule in several ways: - by investigating complaints filed with it,
- conducting compliance reviews to determine if covered entities are in compliance, and
- performing education and outreach to foster compliance with the Privacy Rule’s requirements.
| | |
OCR also works in conjunction with the Department of Justice (DOJ) to refer possible criminal violations of HIPAA and with the Centers for Medicare & Medicaid Services (CMS) in investigating possible violations of the HIPAA Security Rule. |
Text description of HIPAA Privacy Rule Complaint Process Back to Top
|