Five enforcement actions hold healthcare providers accountable for HIPAA Right of Access

The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) announced the resolution of five investigations in its HIPAA Right of Access Initiative, bringing the total number of these enforcement actions to twenty-five since the initiative began. The Health Insurance Portability and Accountability Act, or HIPAA, for short, gives people the right to see and get copies of their health information from their healthcare providers and health plans. After receiving a request, a HIPAA covered entity has 30 days (or 60 days if an extension is applicable) to provide an individual or their representative with their records in a timely manner. OCR has taken the following enforcement actions that underscore the importance and necessity of compliance with the HIPAA Right of Access: Read the HHS Press Release Read the Advanced Spine & Pain Management (ASPM) Resolution Agreement and Correction Action Plan Read the Denver Retina Center Resolution Agreement and Correction Action Plan Read the Dr. Robert Glaser Notice of Proposed Determination and Notice of Final Determination Read the Rainrock Treatment Center, LLC dba Monte Nido Rainrock (“Monte Nido ”) Resolution Agreement and Corrective Action Plan Read the Wake Health Medical Group Resolution Agreement and Corrective Action Plan