Which HHS office is charged with protecting an individual patient's health information privacy and security?

The Office for Civil Rights (OCR) within the U.S. Department of Health and Human Services (HHS) is charged with protecting an individual patient's health information privacy and security. OCR enforces the Health Insurance Portability and Accountability Act (HIPAA), which sets national standards for the protection of health information. The office also provides guidance and support to help entities comply with privacy regulations and investigates complaints related to potential violations.