Skip Navigation

Font Size Print Download Reader HHS Home|HHS News|About HHS

Health Information Privacy

Office for Civil Rights

Civil Rights

Health Information Privacy

HIPAA

Understanding HIPAA Privacy

HIPAA Administrative Simplification Statute and Rules

Breach Notification Rule

Other Administrative Simplification Rules

Enforcement Rule

Combined Text of All Rules

Enforcement Activities & Results

How to File a Complaint

Frequently Asked Questions

PSQIA

Understanding PSQIA Confidentiality

PSQIA Statute & Rule

Enforcement Activities & Results

How to File a Complaint

Final Guidance on Risk Analysis

The Office for Civil Rights (OCR) is responsible for issuing periodic guidance on the provisions in the HIPAA Security Rule. (45 C.F.R. §§ 164.302 – 318.) This series of guidance documents will assist organizations in identifying and implementing the most effective and appropriate administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of electronic protected health information. The materials will be updated annually, as appropriate.

View the Final Guidance on Risk Analysis.