Dive Brief:

• HHS' Office for Civil Rights Jocelyn Samuels said the OCR has yet to create a new protocol for conducting a new round of HIPAA audits. 
• When OCR does resume its efforts, it is expected to make several changes, including the introduction of "desk audits," which will have a narrower focus than comprehensive on-site audits.
• The updated HIPAA audit protocol will reflect changes in the HIPAA Omnibus Rule and more specific test procedures, as well as including findings and feedback from 115 pilot audits in 2012.

Dive Insight:

Implementing changes take time, and it sounds like HHS' plans for creating more thorough HIPAA audits is, perhaps, more complicated than originally anticipated—especially given that despite all the crackdowns in 2014 for HIPAA violations, 2015 is expected to be even more intense. 

While the healthcare industry bides its time and waits for new protocol guidance, it's critical to do everything possible to prevent data breach. During a briefing, Samuels said at the briefing that in addition to the audits, OCR "will continue to identify and bring to resolution high impact cases that send strong enforcement messages to the industry about compliance."

Want to read more? You may enjoy this story on a recent OCR provider briefing on Phase 2 audits.