OCR gears up for fall audit season, looks for HIPAA noncompliance

Why This Topic Matters

Understanding OCR audit trends and HIPAA compliance focus areas helps covered entities evaluate their privacy and security programs before an audit or investigation occurs. The article is useful for organizations that need to assess readiness, reduce compliance risk, and maintain documentation of their HIPAA-related policies and actions.

Article Sections

1. Audit outlook and OCR activity

   Summarizes the current audit environment and the agencies involved. It describes the general scope of covered entities being reviewed and the broad compliance areas under scrutiny.

2. Practices unlikely to be in compliance

   Discusses the overall compliance picture and the reported rate of organizations found compliant in an earlier audit round. It highlights why many practices may still need to review their HIPAA programs.

3. Comply now, prepare for future audits

   Outlines broad readiness topics such as access monitoring, safeguarding patient information, breach response planning, and documentation. It focuses on general areas organizations may want to assess before future audits.