The Office for Civil Rights (OCR) of the Department of Health and Human Services performs regular inspections to verify that covered organizations and associated business partners comply with HIPAA laws. In 2001, OCR launched a prototype annual audit where it assessed covered businesses' activities using a list of guidelines defined as the audit program protocol. In 2016, the standard was modified.