Eleven Enforcement Actions Uphold Patients’ Rights Under HIPAA — Corrective action / RA
Resolution Jul 2022
Penalty
Corrective action / RA
Action type
Resolution agreement
Entity profile
—
Case number
—
What went wrong
Eleven Enforcement Actions Uphold Patients’ Rights Under HIPAA - July 15, 2022
- Navigate to: HIPAA for Professionals Regulatory Initiatives Privacy Summary of the Privacy Rule Guidance Combined Text of All Rules HIPAA Related Links Security Security Rule NPRM Summary of the Security Rule Security Guidance Cyber Security Guidance Breach Notification Breach Reporting Guidance Reports to Congress Regulation History Compliance & Enforcement Enforcement Rule Enforcement Process En
Full description
Navigate to: HIPAA for Professionals Regulatory Initiatives Privacy Summary of the Privacy Rule Guidance Combined Text of All Rules HIPAA Related Links Security Security Rule NPRM Summary of the Security Rule Security Guidance Cyber Security Guidance Breach Notification Breach Reporting Guidance Reports to Congress Regulation History Compliance & Enforcement Enforcement Rule Enforcement Process Enforcement Data Resolution Agreements Case Examples Audit Reports to Congress State Attorneys General Special Topics Parental Access Mental and Behavioral Health Change Healthcare Cybersecurity Incident FAQs HIPAA and COVID-19 HIPAA and Reproductive Health HIPAA and Final Rule Notice HIPAA and Telehealth HIPAA and FERPA Research Public Health Emergency Response Health Information Technology Health Apps Patient Safety Covered Entities & Business Associates Business Associate Contracts Business Associates Training & Resources FAQs for Professionals Other Administrative Simplification Rules Substance Use Disorder Confidentiality Eleven Enforcement Actions Uphold Patients’ Rights Under HIPAA Today, the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) announced the resolution of eleven investigations in its Health Insurance Portability and Accountability Act (HIPAA) Right of Access Initiative, bringing the total number of these enforcement actions to thirty-eight since the initiative began. OCR created this initiative to support individuals' right to timely access their health records at a reasonable cost under the HIPAA Privacy Rule. Read the HHS Press Release Read the ACPM Podiatry Notice of Proposed Determination, and Notice of Final Determination Read the Associated Retina Specialists Read the Lawrence Bell, Jr., D.D.S. Resolution Agreement and Corrective Action Plan Read the Coastal Ear, Nose, and Throat (ENT) Resolution Agreement and Corrective Action Plan Read the Danbury Psychiatric Consultants (DPC) Read the Erie County Medical Center Corporation Resolution Agreement and Corrective Action Plan Read the Fallbrook Family Health Center Resolution Agreement and Corrective Action Plan Read the Hillcrest Nursing and Rehabilitation Resolution Agreement and Corrective Action Plan Read the MelroseWakefield Healthcare (MWH) Resolution Agreement and Corrective Action Plan Read the Memorial Hermann Health System Resolution Agreement and Corrective Action Plan Read the Southwest Surgical Associates (SWSA) Resolution Agreement and Corrective Action Plan Content last reviewed July 15, 2022
Timeline
- ResolutionJul 2022
- Incident and investigation milestones are not consistently published by OCR in machine-readable form.
Key takeaways for your organization
- Treat internet-facing systems and vendor-hosted environments as in-scope for HIPAA risk analysis and technical safeguards testing.
- Maintain an actionable risk analysis tied to remediation milestones; evidence should map to Security Rule implementation specifications.
- Align policies, procedures, and evidence with the specific CFR provisions cited in OCR resolutions affecting your entity type.
- Run tabletop exercises for breach response, OCR inquiry handling, and privilege-preserving communications with counsel.
Related actions
Source
U.S. Department of Health and Human Services release
Source: U.S. Department of Health and Human Services, Office for Civil Rights. medcomply.ai aggregates public materials for educational use — not legal advice.