The Details Behind HHS Breach Investigation Ramp-Up

Gov Info Security: The Department of Health and Human Services' Office for Civil Rights is ramping up and standardizing how smaller health data breaches are investigated by its regional offices, adding staff to support the effort, says Iliana Peters, OCR's senior adviser for HIPAA compliance and enforcement.

Under the HIPAA Breach Notification Rule that went into effect in 2009, OCR regional offices investigate all breaches of protected health information affecting 500 or more individuals. Those major incidents also get posted on OCR's "wall of shame" website.

Read article