The Office for Civil Rights and Department of Health and Human Services is sending out a letter to 150 healthcare organizations. The purpose for the letter is to determine the primary contact OCR should use to reach Entity Name regarding its potential inclusion in the HIPAA Privacy, Security, and Breach Notification Rules Audit Program.
A sample letter can be found on the Department of Health and Human Services website.