The Office for Civil Rights (OCR) is a division of the U.S. Department of Health and Human Services (HHS) responsible for enforcing HIPAA's Privacy, Security, and Breach Notification Rules. OCR investigates complaints of HIPAA violations and conducts compliance audits to ensure that covered entities are adhering to the law.