OCR's Risk Analysis Initiative has now produced 12 enforcement actions, and the program is expanding.

Health care IT teams already know the requirement.

The CEO sits across from the IT team and says it with confidence: "I don't have patient information on my device.

On March 13, UPMC began notifying patients that their electronic health records may have been improperly accessed thr