OCR Issues Guidance on the Performance of a HIPAA Risk Analysis v. a Gap Analysis
In April 2018 the U.S. Department of Health and Human Services Office of Civil Rights (OCR) published guidance entitled “Risk Analyses v. Gap Analyses – What is the difference?” (the “Guidance”).[1] This Guidance is extremely helpful for both…