This website and our authorized third-party service providers use cookies to achieve the purposes described in our Privacy Policy. If you would like to learn more or withdraw your consent to some or all cookies, please review our Privacy Policy. By selecting “I ACCEPT” on this banner, scrolling this page, clicking any link, or continuing to browse this site, you agree to the use of cookies.
The Office for Civil Rights (OCR) was set to begin HIPAA audits of covered entities and business associates next month, but the Department of Health and Human Services (HHS) is still constructing a Web portal to help in the process, thus delaying the start, according to Linda Sanches, OCR senior adviser.
"We recently had an opportunity to update the technology we're using, giving us capabilities that we just didn't have access to before," Sanches told HealthIT Security. "OCR has held off on the start of audits so we could implement this new technology. I'm ready to go, but our technology isn't quite there yet."
The audits will be looking at compliance with the HIPAA privacy and security rules. Sanches indicated that encryption is arguably the biggest issue, saying, "I can't believe how many organizations lose unencrypted thumb drives [containing individuals' health information] left and right."
As for the actual start date, Sanches would only say "stay tuned." She made her remarks as part of the recently concluded Healthcare Information and Management Systems Society conference in Boston.
To ensure your company's compliance with all health information rules and regulations, please order a copy of Personnel Concepts' HIPAA Compliance Program.
Practical articles on HR, Safety, compliance, and people operations—written for real businesses, not legal textbooks.
U.S. Department of Labor Officially Restores Prior Overtime Exemption Rules
On May 14th, 2026, the Wage and Hour Division (WHD) of the U.S. Department of Labor (DOL) announced it has officially rescinded the 2024 overtime exemption rules. Specifically, the WHD published a technical amendment to restore previous 2019 regulations that dictated overtime exemptions for...
NLRB General Counsel Takes Action to Tackle Current Case Backlog
On May 6th, the National Labor Relations Board (NLRB) and NLRB General Counsel Crystal Stowe Carey announced the bulk transfer of thousands of labor practice cases. Specifically, this action fulfills an initiative signed by the NLRB General Counsel earlier this year. Overall, the initiative...
Privacy Agency Invites Comments from Businesses on the CCPA’s Usage of Personal Data
Recently, the California Privacy Protection Agency (CPPA) issued a call for comments on the current state of personal data collection under the California Consumer Privacy Act (CCPA). Specifically, the invitation to deliver remarks was issued on April 20th, 2026. The information provided by the...
DOL Proposes New Joint Employer Rule To Unify Standards Under Federal Labor Laws
In April 2026, the U.S. Department of Labor issued a proposed rule to establish a single, clear standard for determining when joint-employer status applies under three major federal laws: the Fair Labor Standards Act (FLSA), the Family and Medical Leave Act (FMLA), and the Migrant and Seasonal...
DOL Updates Enforcement Approach for Employee Benefit Plans: What Employers Should Know
The U.S. Department of Labor (DOL) recently announced a significant change in its enforcement of employee benefit plan rules. The DOL will now focus more closely on serious violations that harm workers and retirees, meaning compliant employers may face less scrutiny under the updated approach.