The Office for Civil Rights (OCR) at the US Department of Health and Human Services administers and enforces the health information Privacy, Security, and Breach Notification Rules, issued under the Health Insurance Portability and Accountability Act of 1996, otherwise known as HIPAA, and the Health Information Technology for Economic and Clinical Health (HITECH) Act. In doing so, we play an important role in ensuring that individuals' health information remains private and secure, and that individuals have rights to their health information.

• EHRs and HIPAA: Steps for Maintaining the Privacy and Security of Patient Information CME/CE
  Consistent policies and procedures can help keep protected information safe.
  March 17, 2014
• Your Mobile Device and Health Information Privacy and Security CME
  Mobile device security is your obligation. What are the risks? How can we secure and protect our patients' health information?
  September 13, 2013
• Understanding the Basics of HIPAA Security Risk Analysis and Risk Management CME
  Do you know the basics about security risk analysis and risk management for electronic protected health information?
  September 13, 2013
• Patient Privacy: A Guide for Providers CME
  HIPAA gives patients much control over how their data are used. Do your practice's policies protect their rights?
  April 26, 2013
• HIPAA and You: Building a Culture of Compliance 
  Health data privacy is everyone's responsibility. Learn steps to safeguard patient information throughout the care environment.
  June 29, 2012
• Examining Compliance With the HIPAA Privacy Rule 
  An unsecured laptop or outdated privacy policies could lead to hefty fines. Is your practice HIPAA compliant?
  June 27, 2012

• Are You a Covered Entity?
• For Small Providers, Small Health Plans, and Other Small Businesses
• Summary/Guidance on Significant Aspects of the Privacy and Security Rules
• Fast Facts for Covered Entities
• Model Notices of Privacy Practices
• Business Associates FAQs
• Sample Business Associate Agreement
• Security Rule Guidance Material
• Guidance on Risk Analysis
• Mobile Device Security
• Communicating with a Patient's Family, Friends, or Others Involved in The Patient's Care
• FAQs About the Disposal of Protected Health Information
• Training Materials on the HIPAA Privacy Rule

• Your Health Information Privacy Rights
• Privacy, Security, and Electronic Health Records
• Understanding the HIPAA Notice
• Sharing Health Information with Family Members and Friends
• HIPAA Videos for Consumers