Ace the AAMI New York State Laws Challenge 2026 – Unlock Your Regulatory Superpowers!

HIPAA privacy and security rules are enforced by the Office for Civil Rights (OCR) within the U.S. Department of Health and Human Services. OCR investigates complaints about how protected health information is used and disclosed, conducts compliance reviews, and can impose civil penalties for violations. The other agencies don’t serve as the enforcement body for HIPAA privacy and security: the FDA regulates drugs and medical devices, CMS oversees Medicare and Medicaid program operations (and related administrative aspects), and the National Library of Medicine functions as a research and information resource.