The OCR has not performed required audits of corporations that handle protected patient information, has not sufficiently documented decisions made regarding potential privacy violations and has failed to properly safeguard its own records, according to the report.
Read the full article on Becker’s Hospital Review.