OCR’s HIPAA Settlement With Self-funded Health Plan Highlights Importance of Cybersecurity On April 23, 2026, the U.S. Department of Health and Human Services’ (HHS) Office of Civil Rights (OCR) announced settlements in four ransomware investigations under the HIPAA Security Rule, one of which involved a self-funded group health plan. This development highlights the importance of […]