HIPAA violation cases are compliance investigations that result from a data breach being reported to the Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) or a privacy complaint being submitted to OCR via the complaints portal. When OCR identifies a violation of HIPAA, violation cases can be resolved in multiple ways. OCR may choose to take no action if the HIPAA-regulated entity has identified and voluntarily corrected the HIPAA violation.

Read the full article at HIPAA Journal →