Five enforcement actions hold healthcare providers accountable for HIPAA Right of Access

The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) announced the resolution of five investigations in its HIPAA Right of Access Initiative, bringing the total number of these enforcement actions to twenty-five since the initiative began.  The Health Insurance Portability and Accountability Act, or HIPAA, for short, gives people the right to see and get copies of their health information from their healthcare providers and health plans.  After receiving a request, a HIPAA covered entity has 30 days (or 60 days if an extension is applicable) to provide an individual or their representative with their records in a timely manner. OCR has taken the following enforcement actions that underscore the importance and necessity of compliance with the HIPAA Right of Access:

Content created by Office for Civil Rights (OCR)
Content last reviewed