DHHS Releases Updated HIPAA Security Risk Assessment Tool

BACK TO INSIGHTS     Articles

Published Date: 10/1/2026

On September 10, 2026, the U.S. Department of Health & Human Services, Office for Civil Rights (OCR) and the Office of the National Coordinator for Health IT (ONC) announced the release of version 3.7 of the HIPAA Security Risk Assessment (SRA) Tool. The tool may be used by HIPAA covered entities and their business associates to assist in periodic risk assessments as required by the HIPAA Security Rule. Such risk assessments can help organizations to ensure they are compliant with HIPAA’s administrative, physical, and technical safeguards.

CLICK HERE TO READ THE FULL OCTOBER 2026 HEALTHCARE LAW UPDATE NOW

IF YOU NEED ASSISTANCE WITH YOUR ORGANIZATION’S PRIVACY AND SECURITY PROGRAM, CONTACT:
Lani M. Dornfeld, CHPC | 973.403.3136 | ldornfeld@bracheichler.com

*This is intended to provide general information, not legal advice. Please contact the authors if you need specific advice.

Related Practices:   Healthcare Law

Related Attorney:   Lani M. Dornfeld

Related Industry:   Healthcare