Who is going to enforce the HIPAA regs?
The Department of Health and Human Services has created an office to handle information technology privacy and security matters. HHS announced the formation of the privacy and security office in a notice in the Sept. 5 edition of the Federal Register. The office specifically is responsible for implementing programs to comply with federal privacy and security legislation; monitoring information security and evaluating security safeguards; establishing an HHS team to respond to privacy and security breaches; and developing security policies and guidance for HHS. The creation of the privacy and security office is part of a reorganization of the HHS Office of Information Resources and Management. More information about the privacy office is available at www.access.gpo.gov/su_docs/aces/aces140.html. (Posted 9/15/00) There is considerable confusion regarding HIPAA enforcement. I’ve heard statements to the effect that “it won’t be enforced because there is no funding for HIPAA cops and the St