Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 08 MAY 2012

HHS Begins HIPAA Privacy And Security Audits

Fisher Phillips LLP
Explore more from Fisher Phillips LLP

As you may recall, the HITECH Act required Health and Human Services (HHS), the federal agency in charge of administering HIPAA, to affirmatively conduct periodic audits to ensure that covered entities and business associates are complying with HIPAA's privacy and security rules.

United StatesEmployment and HR
Fisher & Philips LLP
Fisher & Philips LLP
Author LinkedIn connections

As you may recall, the HITECH Act required Health and Human Services (HHS), the federal agency in charge of administering HIPAA, to affirmatively conduct periodic audits to ensure that covered entities and business associates are complying with HIPAA's privacy and security rules. Before HITECH, HHS was mostly responding to complaints and not conducting random audits of HIPAA compliance.

HHS's Office for Civil Rights (OCR) has launched a pilot audit program and expects to complete 150 audits by the end of 2012. These audits will include requesting documentation as well as onsite visits and a final report noting compliance issues.

These HHS audits can lead to compliance reviews, resulting in monetary settlements or the imposition of civil money penalties. Covered entities and business associates, including employer-provided health plans and their service providers, should make sure their workforce training, policies and procedures, and security risk assessments are

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Treasury Issues Temporary Regulations On Trump Accounts And Contributions

The U.S. Department of the Treasury and IRS recently issued temporary regulations that provide an immediately effective framework for establishing and administering “Trump Accounts,” including broad automatic enrollment and large-scale contributions funded by governmental and charitable donors. The regulations became effective September 30, 2026, apply to taxable years beginning on or after January 1, 2026, and expire September 30, 2029.
United StatesEmployment and HR
Fennemore Craig, P.C.
Fennemore Craig, P.C.
Article

IRS Issues New Revenue Procedure

The IRS has released Revenue Procedure 2026-24, establishing new inflation-adjusted limits for Health Savings Accounts and high-deductible health plans effective in 2027. These updates include increased contribution limits, higher minimum deductibles, and expanded out-of-pocket maximums, along with new provisions for direct primary care service arrangements under the One, Big, Beautiful Bill Act. How will these changes impact employee benefit planning and healthcare coverage strategies?
United StatesEmployment and HR
Winston Taylor
Winston Taylor
Article

Allegheny County Council Passes Paid Parental Leave Policy

On Tuesday, October 20, 2026, the Allegheny County Council passed legislation requiring employers with at least 15 workers to provide 12 weeks of paid parental leave, ending months-long debate on the proposal. We previously reported on the initial 18-week proposal in May 2026 (summarized here), the revised proposed legislation (summarized here), and the Allegheny County Board of Health passing the legislation (summarized here). The measure was passed in an 11-4 vote. It will become effective in one year, as County Executive Sara Innamorato signed the bill on, October 22, 2026.
United StatesEmployment and HR
Buchanan Ingersoll & Rooney
Buchanan Ingersoll & Rooney
Article

DOL Announces Enforcement Actions Against Employers In H-1B And PERM Fraud Probe

The Trump Administration has launched an unprecedented enforcement action suspending permanent labor certification processing for eight major employers, linking immigration sponsorship to layoff histories and recruitment practices. This development signals a fundamental shift in how the government evaluates employer access to H-1B and green card programs, with investigations already underway and subpoenas served.
United StatesEmployment and HR
Mayer Brown
Mayer Brown
Article

Maryland’s Ban On Mandatory Employer Meetings: Notice Deadline Looms

Maryland employers must comply with new posting requirements under the Worker Freedom Act, which prohibits penalizing employees who decline attendance at employer-sponsored meetings on religious or political matters. The Maryland Department of Labor has released official notices in English and Spanish that must be displayed prominently in workplaces and provided to new hires starting November 1, 2026.
United StatesEmployment and HR
Jackson Lewis P.C.
Jackson Lewis P.C.
Article

California Passes AB-1883 Targeting AI Workplace Surveillance Of Employees’ Emotional State And Neural Data

On Aug. 30, AB-1883 received final legislative approval and now heads to California Governor Gavin Newsom for signature or veto. If enacted, AB-1883 would prohibit employers from using workplace surveillance tools that rely on artificial intelligence (AI) to recognize, infer, or predict an employee’s emotional state, or to collect “neural data.”
United StatesEmployment and HR
Barnes & Thornburg LLP
Barnes & Thornburg LLP