Nearly two years after the Office of Civil Rights (“OCR”) first announced its preparation for another round of HIPAA audits, Phase II of OCR’s HIPAA audit program is finally underway.
On March 21, OCR began emailing various types of entities to verify their e-mail addresses and contact information. OCR acknowledged that its email communication may be treated by email filters as spam, but has advised that it expects entities to check their junk or spam email folder for emails from OCR. Recipients have 14 days to verify their email address or provide OCR with updated primary and secondary contact information.
A pre-screening questionnaire will follow seeking details regarding the entity’s size, geographic location, services and scope of operations. Covered entities will also be asked to identify their business associates. Presumably, OCR