OCR emphasized that they retain discretion to decide whether to conduct a formal investigation where preliminary review of the facts indicates a degree of culpability less than willful neglect.
The 2013 Amendments make covered entities and business associates liable for acts of their business associates that are deemed to be agents.