On Top of that, breaches of PHI that meet certain conditions will produce an audit. The OCR could also conduct observe-up audits for businesses with a history of prior non-compliance. Random audits are unusual and typically reserved for much larger, set up entities due to OCR’s confined sources. When CAPs https://www.auditpeak.com/how-to-pass-a-hipaa-compliance-audit-in-2025/