Published on
If you’ve received a postcard purporting to be from the Office of Civil Rights (OCR), asking you to complete a “mandatory” HIPAA compliance risk assessment, be aware that it’s a fake. There is no such assessment required. National Government Services issued a warning to healthcare professionals to let them know that the URL and phone number included in the text of the postcard actually belong to a nongovernmental website for a group that offers marketing consulting services.
Beware Postcards Fraudulently Demanding You Do a HIPAA Compliance Risk Assessment