Is you business subject to HIPAA compliance? The HHS Office for Civil Rights (OCR) announced yesterday that they have entered Phase 2 of their audits. They have begun sending communications now, and they state that "Communications from OCR will be sent via email and may be incorrectly classified as spam. If your entity’s spam filtering and virus protection are automatically enabled, we expect you to check your junk or spam email folder for emails from OCR;" There will be a few months before the audits actually happen. More info here