- Chief Compliance Officer and VP of Legal Affairs, Arrow Electronics
By 
Adrianne Appel2023-02-21T22:18:00
The number of compliance reviews by the Department of Health and Human Services (HHS) of health organizations increased between 2017 and 2021, according to the agency’s latest reports to Congress.
Reviews initiated by the HHS Office of Civil Rights grew 44 percent over the four-year period, the OCR said in its report covering privacy, security, and breach notification compliance under the Health Insurance Portability and Accountability Act (HIPAA). The report, published Friday, focused on the enforcement activities of the OCR, including the number of complaints it received, how they were resolved, and the number of compliance reviews and audits spawned by those complaints.
From 2017-21, the number of complaints received by the OCR increased 39 percent, according to the report. In 2021, the OCR received 34,077 new complaints alleging violations of HIPAA rules, an increase of 25 percent over 2020.
THIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.
News and analysis for the well-informed compliance or audit exec. Select an option and click continue.
Annual Membership $499 Value offer
Full price one year membership with auto-renewal.
Membership $599
One-year only, no auto-renewal.
About 83 percent of data breaches are perpetrated by external bad actors and not employees, with 70 percent of those breaches linked to organized crime groups with financial motives, according to the latest research.
Some U.S. hospitals are falling short in protecting themselves from cyberattacks, with 29 percent of facilities recently surveyed lacking a documented GRC system, a new report from the Department of Health and Human Services found.
The Department of Health and Human Services and its office responsible for enforcing health privacy reorganized so it can sharpen enforcement of cybersecurity and data breaches.
A prominent risk management firm has issued its predictions for the top five risks for business in 2025, along with guidance for how organizations should prepare and respond.
When the DOJ released its revised Evaluation of Corporate Compliance Programs, it turned some heads. Tucked into a section on risk assessments was a strongly worded series of questions that appeared to shoulder compliance teams with the responsibility for ensuring the safe use of AI tools by their firms.
The Department of Justice’s Evaluation of Corporate Compliance Programs has made the importance of artificial intelligence governance frameworks clear, but it didn’t say what role compliance should play. Here’s the answer.
