Through OCR, HHS is authorized to conduct compliance reviews and investigations of complaints alleging violations of the HIPAA rules by covered entities (CEs) and business associates (BAs). In addition, CEs and BAs must cooperate with HHS/OCR compliance reviews and investigations.
OCR also is responsible for enforcing federal civil rights, conscience, and religious freedom laws.