Last year the Office of Civil Rights (OCR) entered into 12 settlements with covered entities and its business associates (total amount in fines $23.51 mil. – more than a triple increase from 2015). It also issued several new guidance documents, launched a new HIPAA audit program, and announced that it will be investigating smaller breaches