Last month the Office for Civil Rights (OCR) began the second phase of its HIPAA Audit Program. OCR has randomly selected 350 covered entities to take part in desk audits which will aim to ensure those entities have proper written documentation, training and notice procedures regarding the management and safeguarding of personal health information belonging to