Inspector general knocks HIPAA security oversight

A review by the Department of Health and Human Service has found the Centers for Medicare and Medicaid Service wanting when it comes to oversight of health information security.

HHS' Office of the Inspector General issued a report Oct. 27 that finds CMS has fallen short of its charter to enforce the Health Insurance Portability and Accountability Act's security provisions.

The report states that "limited actions" by CMS have "not provided effective oversight or encouraged enforcement of the HIPAA Security Rule by covered entities."