Government HealthIT reported yesterday:
The Centers for Medicare and Medicaid Services will begin on-site reviews of hospitals' compliance with security rules mandated by the Health Insurance Portability and Accountability Act of 1996.CMS officials said at a workshop on HIPAA security yesterday that they expect to review 10 to 20 hospitals in the next nine months.
Link to the online article here.