Enforcement Highlights - Current | HHS.gov
Nov 21, 2024 · OCR lacks jurisdiction under HIPAA. For example, in cases alleging a violation by an entity not covered by HIPAA; The complaint is untimely, or withdrawn by the filer; and The …
Resolution Agreements - HHS.gov
Aug 18, 2025 · Resolution Agreements and Civil Money Penalties A resolution agreement is a settlement agreement signed by HHS and a covered entity or business associate in which the …
The HIPAA Enforcement Rule - HHS.gov
Aug 31, 2020 · The HIPAA Enforcement Rule contains provisions relating to compliance and investigations, the imposition of civil money penalties for violations of the HIPAA …
HIPAA Compliance and Enforcement | HHS.gov
Jul 25, 2017 · HIPAA covered entities were required to comply with the Security Rule beginning on April 20, 2005. OCR became responsible for enforcing the Security Rule on July 27, 2009. …
HHS Office for Civil Rights Imposes a $200,000 Penalty ... - HHS.gov
Mar 6, 2025 · The civil monetary penalty marks OCR’s 53rd HIPAA Right of Access enforcement action to advance patient access to medical records.
Summary of the HIPAA Privacy Rule - HHS.gov
Mar 14, 2025 · Statutory and Regulatory Background The Health Insurance Portability and Accountability Act of 1996 (HIPAA), Public Law 104-191, was enacted on August 21, 1996. …
How OCR Enforces the HIPAA Privacy & Security Rules - HHS.gov
Nov 20, 2023 · Covered entities are required by law to cooperate with complaint investigations. If a complaint describes an action that could be a violation of the criminal provision of HIPAA (42 …
HITECH Act Enforcement Interim Final Rule - HHS.gov
Jun 16, 2017 · This interim final rule conforms HIPAA’s enforcement regulations to these statutory revisions that are currently effective under section 13410 (d) of the HITECH Act.
HIPAA News Releases | HHS.gov
Feb 7, 2025 · To view HIPAA News Releases & Bulletins from 2015 to January 19, 2025, visit the HIPAA News Archive.
Your Rights Under HIPAA - HHS.gov
May 30, 2025 · Learn about your health information privacy rights under HIPAA and access guidance materials designed to help you understand and exercise these rights.