Since finalizing the HIPAA Privacy and Security Rules in 2003, the Office for Civil Rights ("OCR") has looked into more than a quarter-million HIPAA complaints and launched more than 1,000 compliance reviews. OCR has resolved approximately 90% of these cases. In 46,558 cases, OCR intervened early and provided technical assistance without the need for a formal investigation. In over 28,654 other cases, OCR required changes in privacy practices and corrective actions by or provided technical assistance to HIPAA covered entities and their business associates. Over the last few years, we have seen an increase in the volume of completed investigations and increased financial penalties. So far, of the 97 cases that included a monetary settlement or OCR imposed a civil penalty, the total penalties exceed more than $135 million-$135,058,482 to be exact. Among these civil penalties is a case that's been back in the headlines recently, involving the University of Texas MD Anderson Cancer Center.