In June, the U.S. Department of Health and Human Services' Office for Civil Rights ("OCR") issued guidance on reducing risks that software poses to electronic protected health information ("ePHI"), such as installing patches or restricting network access as appropriate on all types of devices that store ePHI, including phones, computers, servers, and routers. The OCR pointed to the United States Computer Emergency Readiness Team and Health Insurance Portability and Accountability Act ("HIPAA") Administrative Safeguards as additional resources.