DHHS Releases Updated HIPAA Security Risk Assessment Tool

Published Date: 10/1/2026
On September 10, 2026, the U.S. Department of Health & Human Services, Office for Civil Rights (OCR) and the Office of the National Coordinator for Health IT (ONC) announced the release of version 3.7 of the HIPAA Security Risk Assessment (SRA) Tool. The tool may be used by HIPAA covered entities and their business associates to assist in periodic risk assessments as required by the HIPAA Security Rule. Such risk assessments can help organizations to ensure they are compliant with HIPAA’s administrative, physical, and technical safeguards.
CLICK HERE TO READ THE FULL OCTOBER 2026 HEALTHCARE LAW UPDATE NOW
IF YOU NEED ASSISTANCE WITH YOUR ORGANIZATION’S PRIVACY AND SECURITY PROGRAM, CONTACT:
Lani M. Dornfeld, CHPC | 973.403.3136 | ldornfeld@bracheichler.com







