Lexology September 22, 2022
The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) has been busy over the past month announcing new enforcement actions and settlement agreements related to violations of the Privacy Rule implemented under the Health Insurance Portability and Accountability Act (HIPAA). OCR’s latest actions offer a reminder for HIPAA Covered Entities that Privacy Rule enforcement activity can come in a variety of types and sizes.
Most recently, OCR demonstrated its continued interest in enforcing the Privacy Rule’s patient right of access to medical records pursuant to its HIPAA Right of Access Initiative that began in 2019. Three dental practices alleged to be in violation have agreed to pay certain resolution amounts to HHS and...