OCR To Begin HIPAA Audits This Month

The HHS Office for Civil Rights (OCR) will begin HIPAA audits on covered entities this month, Health Data Management reports. KPMG has been contracted to conduct the audits–at least 150 by the end of next year–on HIPAA’s privacy, security and breach notification rules. The OCR has said an initial 20 audits will act as a test run to determine how future assessments will be conducted. Entities will be notified of an impending audit in writing 30 to 90 days prior, but the OCR has not yet indicated how it will select which firms to visit.