HHS’ Office for Civil Rights Settles HIPAA Investigation of Ambry Genetics for Security Rule Violations

HHS Office for Civil Rights settled a HIPAA Security Rule investigation with California genetic testing firm Ambry Genetics.

On September 17, 2026, the U.S. Department of Health and Human Services' Office for Civil Rights announced a settlement with Ambry Genetics Corporation concerning potential violations of the HIPAA Security Rule. Ambry, headquartered in Aliso Viejo, California, is a covered entity under HIPAA. The announcement resolves an OCR investigation into the genetic testing company's security practices.