The Centers for Medicare & Medicaid Services (CMS) enforces HIPAA Administrative Simplification Requirements on behalf of the Health and Human Services (HHS).
The CMS enforcement activities include proactive enforcement through Compliance Reviews. Here’s what happens when a HIPAA-covered entity is randomly selected for a review:
