The OCR will post updated audit protocols on its website prior to conducting the 2016 audits. The audit protocol will be updated to reflect the HIPAA Omnibus Rulemaking and can be used as a tool by organizations to conduct their own internal self-audits as part of their HIPAA compliance activities.
The OCR states that its audits will enhance industry awareness of compliance obligations, and enable them to better target technical assistance regarding identified problems. OCRS plans to use information obtained from the audits to develop tools and guidance to assist organizations in compliance self-evaluation and in preventing breaches.
For more information on the Audit Program, see the Department of Health and Human Services (HHS) website.