The U.S. Department of Health and Human Services' Office for Civil Rights produced two reports to Congress about compliance and breaches of the Health Insurance Portability and Accountability Act. Meanwhile, the OCR also reached a settlement with Green Ridge Behavioral Health over a 2019 ransomware attack.