At first glance, the Department of Health and Human Services’ Office for Civil Rights HIPAA enforcement for the year 2022 appears to be lax. In 2022, OCR entered into 20 resolution agreements with HIPAA-covered entities, and imposed civil monetary penalties on two more. 22 cases total.  The breakdown: four HIPAA Privacy Rule impermissible disclosure cases. 17 right-of-access cases (15 settlements, 2 cases [...]