Definition

Enforcement Rule Definition

The HIPAA Enforcement Rule establishes the procedures and remedies for HIPAA violations and sets forth the enforcement activities of the Department of Health and Human Services (HHS). Specifically, it provides the HHS Office for Civil Rights (OCR) with the authority to investigate and take appropriate action against covered entities, such as healthcare providers, health plans, and health care clearinghouses, that fail to comply with the Privacy, Security, and Breach Notification Rules. It also sets forth the civil monetary penalty range and categories of violations, which are determined by the level of culpability and the nature of the violation. The Enforcement Rule also requires covered entities to undertake corrective action to remedy any violation of the HIPAA Rules, including implementing risk management and mitigation activities. Finally, the Enforcement Rule provides individuals with the right to file a complaint with the OCR if they believe their rights have been violated under the HIPAA Rules.