Skip to main content
FQHC Talent

Cookie notice

Allow detailed analytics to improve the site?It's from us, Google and Vercel, and stays off until you accept. If you're signed in, it can link your visits across devices. Declining doesn't limit what you can use. Details & privacy.

Back to the news
Risk & Compliance

HHS reorganizes its civil rights office, creating a privacy and cybersecurity division

Federal

Issue

Enforcement: privacy, fraud and auditsWatching

Next: · Claims are due in the Brockton Neighborhood Health Center data breach settlement

HHS announced on May 18, 2026 that its Office for Civil Rights (OCR) is splitting into three divisions, including a new Health Information Privacy, Data and Cybersecurity Division. OCR has brought 12 or more risk analysis enforcement actions, and a missing documented risk analysis is its top target.

Health centers can keep their HIPAA risk analysis current and on file.

Key points

  • 3 new divisions: Conscience/Religious Freedom, Civil Rights, Health Info Privacy/Data/Cybersecurity
  • A dedicated privacy and cybersecurity division points to continued OCR enforcement after data breaches at FQHCs.
  • Lack of documented risk analysis remains OCR's #1 enforcement target (12+ Risk Analysis actions)
  • Expect OCR to look for a ransomware drill and an updated incident response plan, along with HIPAA Security Rule documentation.

Sources for this story

HHS Press Release

Part of

Sources for your board packet

This story's source plus 4 related stories and their sources, ready to print for your team or board.

Free. Unlocking the packet subscribes you to Intel Brief. You'll also get a short welcome series and the occasional product update. You'll be subscribed right away, with no confirmation email. Unsubscribe with one click in any issue. If you unsubscribed before, we won't re-add you. We never sell your email. You can open each source above without an email.

More in Risk & Compliance

Cite this analysis

FQHC Talent. (2026, May 18). HHS reorganizes its civil rights office, creating a privacy and cybersecurity division. Source: HHS Press Release. Retrieved November 11, 2026, from https://www.fqhctalent.com/intel/hhs-ocr-reorganization-cyber-division-may-18-2026