Get ready for OCR to roll with serious HIPAA audits. The HHS Office for Civil Rights, which has responsibility for enforcing HIPAA rules, has paid contractors to create HIPAA audit protocols, conduct initial audits, and identify potential audit candidates, notes law firm K&L Gates on its website. Audits can include site visits that will examine a number of factors including 1) interviews with leadership; (2) examination of the organization's physical features and operations; (3) evaluation of whether processes match policies; and (4) general observations of compliance with HIPAA requirements, KLG notes. At least surprise audits aren't planned at this time, the law firm reports. "Taking steps to prepare for a possible audit may help to show auditors that your organization already takes HIPAA compliance seriously," KLG advises.