With little fanfare and no release, the HHS Office for Civil Rights (OCR) updated its Phase 2 HIPAA Audit Protocols. However, covered entities (CEs) need not worry. Despite being more challenging to read due to a glitchy layout, the materials seem to have changed little, if at all. Review the updates at www.hhs.gov/hipaa/for-professionals/compliance-enforcement/audit/protocol/index.html.