Don't show this message again
◆ The HHS Office for Civil Rights (OCR) Nov. 30 announced the resolution of five investigations under its HIPAA Right of Access Initiative.[1] A patient’s right to access their records is a cornerstone of the HIPAA privacy rule, which requires covered entities to give patients their records within 30 days, absent an exception. OCR said it entered into settlements with four providers of potential violations of the HIPAA privacy rule and imposed a civil monetary penalty on a fifth: