The Department of Health and Human Services’ Office for Civil Rights (OCR) conducts occasional audits of covered entities and their business associates, to ensure they comply with HIPAA regulations. Covered entities include health plans, healthcare clearinghouses, and healthcare providers.