The federal agency charged with enforcement of HIPAA is the US Department of Health and Human Services’ Office of Civil Rights (OCR). The regulations dealing with the release and protection of health information are known as the Privacy Rule and the Security Rule.