Lots of folks joked about how toothless HIPAA is. Now, it turns out that the complaints don't even get investigated, much less see through all the way to resolution ...
"The Department of Health and Human Services investigated less than 25 percent of 22,964 privacy complaints submitted to HHS’ Office for Civil Rights (OCR) from April 2003 through September 2006"
No wonder so many IT and security folks in medical orgs openly state that their plan is to ignore HIPAA completely until they are (more like "if they ever...") sued.
No comments:
Post a Comment