Careers

Diversity

With 17 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Services

Pro Bono

Am Law 100 firm with practices in Business, Digital Assets and Data Management, Intellectual Property, Labor & Employment, Litigation and Tax.

Home | BakerHostetler

Maximillian Shifrin, Lindy Keown Author Article on Advance Notice Bylaws

To Help the New Administration Help Your Industry, You Need an Agency Strategy

Employment Law Spotlight

January 1, 2025 Due Date: New York Employers Should Prepare Now for the New Paid Prenatal Leave Law

US Supreme Court Set To Hear Case That May Have Significant Implications for the Doctrine of ‘Corporate Separateness’

On February 27, 2023, the U.S. Department of Health and Human Services (HHS) <a href="https://www.hhs.gov/about/news/2023/02/27/hhs-announces-new-divisions-within-office-civil-rights-better-address-growing-need-enforcement-recent-years.html">announced</a> that its law enforcement agency – the Office for Civil Rights (OCR) – will reorganize, adding new divisions to better address the rapid increase in cases it is charged with handling. Tellingly, the title of HHS’s announcement focuses on the need to better address the “growing need” for enforcement. The OCR will now have three new divisions: the Enforcement Division, Policy Division and Strategic Planning Division. OCR Director Melanie Fontes Rainer indicated these new divisions are needed due to the OCR’s caseload having increased 69 percent between 2017 and 2022.



Before implementation of the new Divisions, the OCR’s organizational chart found on HHS’s website looked like this:



<figure class="wp-block-image aligncenter size-full"><img decoding="async" loading="lazy" width="469" height="532" src="https://admin.bakerdatacounsel.com/wp-content/uploads/2023/07/OCR-Org-Chart.png" alt="" class="wp-image-1710" srcset="https://admin.bakerdatacounsel.com/wp-content/uploads/2023/07/OCR-Org-Chart.png 469w, https://admin.bakerdatacounsel.com/wp-content/uploads/2023/07/OCR-Org-Chart-264x300.png 264w" sizes="(max-width: 469px) 100vw, 469px" /></figure>



The changes to the organizational structure and nomenclature include:



<ul>
<li>Renaming the Health Information Privacy Division as the Health Information Privacy, Data, and Cybersecurity Division “to be more reflective of their work and role in cybersecurity,” as hacking-related breaches account for 80 percent of all breaches reported to the OCR.</li>



<li>Reorganizing the responsibilities of the four current divisions “into new functional crosscutting areas: for Policy, Strategic Planning, and Enforcement where staff will work in their areas of expertise based on skill set to drive greater implementation and enforcement of the law.”</li>



<li>Creating the Strategic Planning Division, which will coordinate public outreach related to the various divisions’ focus “as well as expand data analytics and coordinate data collection across HHS leadership.”</li>
</ul>



Of the 51,000 complaints made to the OCR in 2022, 66 percent were related to alleged violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH), 27 percent were related to allegations of civil rights violations, and 7 percent were related to allegations of conscience/religious freedom. The press release noted that in addition to HIPAA and HITECH, the OCR enforces 33 “civil rights, conscience and privacy statutes” and “investigates complaints, conducts compliance reviews, develops policy, promulgates regulations, provides technical assistance, and educates the public about federal civil rights, privacy, and conscience laws.”



HHS appears hopeful that the reorganization will result in an organizational structure that “reflects that of other federal civil rights offices, namely the Department of Education’s Office for Civil Rights.” The press release stated that the OCR believes the restructuring will “provide a more integrated operational structure” across the divisions and will “better use OCR’s limited resources by moving to a skill set model, where teams are organized by skill set and focus on a full set of legal issues.” The ultimate goal is “a more integrated approach to case management and allows for direct engagement between policy, enforcement, and investigations.”



For years, healthcare entities have experienced a wide range of investigation timelines for OCR breach investigations – some remaining open, without OCR contact, for several years. While investigations never will be pleasant, many entities will likely prefer a more predictable cadence of investigations and quicker resolutions.

HHS Announces New Divisions to Address Weighty Case Load

Featured Insights

Related Services

Featured Insights