Skip to content

HHS Issues Annual Report on HIPAA Compliance

The Baldwin Group
Updated: April 24, 2024
1 minute read

As required by the Health Information Technology for Economic and Clinical Health (HITECH) Act, the Office of Civil Rights (OCR) has issued its annual report to Congress on HIPAA Privacy, Security, and Breach Notification Rule compliance for the 2022 calendar year.

Employer Action Items

Plan sponsors of HIPAA-covered entities, especially those of self-insured health plans and business associates, should continually self-assess their compliance with the HIPAA privacy and data security rules, and the requirements under the HITECH Act. This includes ensuring business associate agreements are current, appropriate safeguards are being maintained, and policies and procedures are up-to-date and being followed.


A summary of OCR’s findings found that during 2022, it received 30,435 new complaints alleging violations of HIPAA and the HITECH Act, and resolved 32,250 complaints. Most of these (87%) were resolved before initiating an investigation. In the 560 investigations that the OCR conducted, the covered entity or business associate took corrective action. 17 were resolved with Resolution Agreements and Corrective Action Plans (RA/CAP) and monetary settlements totaling over $802,500, and two with civil money penalties totaling $100,000.

The OCR also completed 846 compliance reviews and required entities to take corrective action or pay a civil penalty in 674 (80%) of these investigations, two of which resulted in RA/CAPs, along with monetary payments totaling over $2.4 million.

In addition, the OCR engaged in 124 outreach activities to (1) increase education to the public about their HIPAA rights, and to regulated entities about trends in large HIPAA breaches and (2) educate regarding the requirements of the HIPAA rules.

Read the full report here.

Related Insights

Stay in the know

Our experts monitor your industry and global events to provide meaningful insights and help break down what you need to know, potential impacts, and how you should respond.

Baldwin Bulletin
Question of the Month.
Question: Please confirm whether an employee’s spousal relocation of personal residence to the United States following a period of several...
Baldwin Bulletin
U.S. Supreme Court Hears Arguments Related to Legality of Medication Abortion.
On March 26, 2024, the Supreme Court heard the case of Alliance for Hippocratic Medicine, et al v FDA (5th...
Medicare Part D
Important Update on New Medicare Part D Creditable Coverage Determination.
It was previously reported that the Inflation Reduction Act of 2022 (“IRA”) included certain cost-reduction provisions that may affect Medicare...
PCORI 2024 Fee Payment Amount Adjusted and Payment Reminder.
The annual fee to fund the Patient-Centered Outcomes Research Institute (PCORI) Trust Fund Fee ​is due on July 31, 2024,...
Baldwin Bulletin
Impact of the Religious Freedom Restoration Act (RFRA) on the ACA Sec. 1557 & Title VII of the Civil Rights Act (CRA)
US District Court ruling in Christian Employers Alliance v. EEOC, et al. limits federal government enforcement of ACA Sec. 1557...
Let's make it possible

Partner with us to build solutions that align with your business, individual, or employee needs and open new possibilities for your future.

Connect with us