The U.S. Department of Health and Human Services and its subsidiary, the Office of Civil Rights (OCR), are responsible for reviewing, updating, and enforcing HIPAA standards and regulations.