Getting Ready for Phase Two HIPAA Audits Periodic OCR audits are required by HITECH, which was passed in 2009. Read More Healthcare LawOlivia AugustMay 3, 2016HIPAA, HIPAA audits, office of civil rights, HITECH, desk audit, on-site audit, HIPAA security rule risk analysis, OCR audit, PHI storage