The entity responsible for enforcing the HIPAA Security Rule is the Department of Health and Human Services’ Office for Civil Rights (OCR). The role of the OCR is significant as it has improved privacy practices within covered entities and has ensured adequate protection for the electronic Public health information of individuals since 2003.