HHS creates new enforcement office for health privacy
By 
Adrianne Appel2023-02-28T20:20:00
The Department of Health and Human Services (HHS) and its office responsible for enforcing health privacy reorganized so it can sharpen enforcement of cybersecurity and data breaches.
The Office for Civil Rights (OCR) at the HHS enforces the Health Insurance Portability and Accountability Act (HIPAA), conducts compliance reviews, investigates complaints, and issues new rules. It also safeguards civil rights and religious freedom related to health.
The office reorganized into three divisions: enforcement, policy, and strategic planning, the HHS announced Monday. The enforcement division will be led by Luis Perez, previously the deputy director for conscience and religious freedom at the OCR.
Related articles
-
News BriefFTC, HHS warn hospitals over use of online tracking tech
The Federal Trade Commission and Department of Health and Human Services sent letters to approximately 130 hospital systems and telehealth providers regarding potential patient privacy violations and security risks stemming from online tracking technologies.
-
News BriefHHS teases policy changes stemming from cyber resiliency analysis
Some U.S. hospitals are falling short in protecting themselves from cyberattacks, with 29 percent of facilities recently surveyed lacking a documented GRC system, a new report from the Department of Health and Human Services found.
-
PremiumHHS proposal aims to ‘shine a light’ on nursing home ownership
It is still too early in the rulemaking process to know what will be included in the Biden administration’s final rule on transparency of nursing home ownership, but there are some steps facilities can take to prepare, according to experts.
More from Regulatory Enforcement
-
ArticleGeorgia Tech to pay $875,000 for allegations brought by compliance officers
Georgia Tech Research Corp. (GTRC) has agreed to pay $875,000 to settle allegations first raised by two compliance officers that its cybersecurity protocols violated acceptable standards for defense contractors, the Department of Justice (DOJ) said.
-
ArticleTractor Supply Company hit with $1.35M fine for alleged California privacy violations
Tractor Supply Company has agreed to get into compliance with California’s consumer privacy law and to pay a $1.35 million fine—the largest yet by California—to settle allegations it violated the privacy rights of customers and job applicants.
-
Basic PageLuminUltra fined $685K by BIS for illegal shipment to Iran
A single $33,000 shipment to Iran triggered a six-figure penalty and years of compliance oversight for biotechnology company LuminUltra Technologies, Inc.