HHS OCR issued a Proposed Rule modifying HIPAA, published Guidance for Health Information Exchanges on disclosures for public health purposes, entered into its thirteenth settlement related to the HIPAA Right of Access, and issued an Audit Report on the health care industry’s compliance with HIPAA. In addition, in the area of cybersecurity, OCR shared the new NIST Cybersecurity Practice Guide on the security of Picture Archiving and Communications System (“PACS”) and shared an alert from the Cybersecurity and Infrastructure Security Agency on the SolarWinds Orion Platform software.