OCR Enforcement Advisory Services​

The Health Information Technology for Economic and Clinical Health Act (HITECH) added new categories of violations and increased fines for HIPAA non-compliance. The Office for Civil Rights (OCR) within the Department of Health and Human Services is vigorously enforcing these new rules and penalties including collecting hundreds of millions of dollars in monetary settlements and civil money penalties from organizations it’s investigators determine are in non-compliance.

OCR Enforcement Advisory Services

Clearwater-Specific OCR Experience | We are ready to take all of your calls, no matter what the case may be.

“411” | Prepare: Before a breach we evaluate and strengthen your Breach Response Capability

“511” | Recover: After a breach we help prepare you and your team for an OCR investigation

“711” |  Respond: If you are under investigation, we coordinate with your legal counsel, support your response and communications with OCR and the public

“911” | Comply: If you have a Corrective Action Plan in place we help you schedule, document actions and respond to OCR

Contact Us

Through Clearwater’s OCR Enforcement Advisory Services our professionals assist our customers in dealing with HPAA requirements and limiting OCR’s bite by:  

  • Providing the support and advice you need to prepare for a breach before it happens
  • Helping you recover after a breach occurs
  • Assisting you in responding to requests for information if OCR opens an investigation
  • Aligning your compliance activities with a Corrective Action Plan if one is put in place.

Using lessons learned from previous OCR enforcement actions, our team of subject matter experts helps you minimize your compliance, financial and reputational risk. We do this by: 

  • Strengthening your breach response capability
  • Preparing you and your team for a potential OCR investigation
  • Coordinating and supporting your response and communications with OCR
  • Scheduling and documenting your cyber risk management actions

Case Study

To date we have helped dozens of organizations like yours successfully navigate OCR investigations, comply with Corrective Action Plans, and respond to OCR audits. We have helped hundreds more prepare before a breach and/or investigation. 

Anchorage Community Mental Health ServicesSee how Clearwater’s OCR Advisory Services has helped Anchorage Community Mental Health Services, Inc.

Download Case Study


Clearwater’s risk analysis methodology and software are in the best-of-breed tier and can be seriously considered by any organization striving to meet regulatory requirements in performing HIPAA Risk Analysis.
Leon Rodriquez, Former Director OCR
Clearwater assisted us throughout the OCR Investigation process.  As a direct result, we were able to negotiate a potential $3.9 million civil money penalty down to a $0.4 million negotiated settlement amount.
Former Privacy Officer, Idaho State University
I don’t know how anyone can deliver the risk analysis OCR is expecting without using your software.
Chief Compliance Officer, Large Midwest IDN
Best in KLAS 2018 - Cybersecurity Advisory Services

Clearwater is Rated #1 in
SaaS-Based Software,
OCR Quality Solutions
& Professional Services

Rated # 1 in Black Book for Compliance & Cyber Risk Solutions
Contact Us

Questions about our OCR Enforcement Advisory Services?

Contact one of our experts today to discuss what offering is the best fit to help you meet your HIPAA compliance and Information Risk Management needs.
Contact Us