HIPAA Compliance Blog

Not only are HIPAA risk assessments a necessary evil but also a regulatory requirement. This requirement is found in the HIPAA Security Rule implementation specification, § 164.308(a)(1)(ii)(A).

Let’s start with what happens if you are not compliant: $1.5 million could be just the start of your costs. That is what the civil monetary penalties can be up to for settlements with the U.S. Department of Health and Human Services (HHS) for HIPAA breaches.