Email Record: OCR should strengthen its oversight of covered entities' compliance with the HIPAA privacy standards.