Compliance Matters Newsletter | October 2026
… all locations where ePHI is maintained, updated technology inventories and system activity logging, guidance on when risk assessments should be revisited following events such as mergers, acquisitions, technology changes, or security incidents, and improved reporting and software security features. Given ongoing Office of Civil Rights (OCR) enforcement efforts focused on risk analysis compliance, employer plan sponsors should consider using the updated tool to periodically reassess security risks, update risk management strategies, and ensure HIPAA privacy and security policies remain aligned with current regulatory expectations and cybersecurity best practices. Access the new SRA on the OCR website. HRA Council Releases 2026 …
https://www.epicbrokers.com/insights/compliance-matters-newsletter-october-2026/