🇺🇸
HHS OCR
Department of Health & Human Services — OCR · United States
HIPAA Privacy RuleHIPAA Security Rule
3/5
Enforcement style
2–5%
Typical fine (% of max)
6–24 months
Avg. investigation
Not available
Cases tracked
Enforcement behaviour
HHS OCR — Department of Health & Human Services — OCR — covers United States. The directory lists HIPAA Privacy Rule, HIPAA Security Rule among its areas of focus.
Priority sectors: Hospitals · Health apps · Insurers · Tracking pixels. Health app pixel enforcement major 2023–24 trend.
Cooperation and leniency: Resolution Agreement common — corrective action plans required.
Notable decisions
Advocate Aurora $12.9M pixel (2024)
HIPAA Privacy Rule / HIPAA Security Rule · Directory example