OCR Highlights HIPAA Enforcement Actions Under Right Of Access Initiative

On March 28, 2022, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) announced the resolution of three investigations and one matter before an Administrative Law Judge related to compliance with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule.

In a press release, OCR Director Lisa Pino stated that "OCR will continue our steadfast commitment to protect individuals' health information privacy and security through enforcement, and we will pursue civil money penalties for violations that are not addressed."

These actions and the statements from Director Pino make it clear that OCR will continue to focus on right of access initiatives. Additionally, covered entities such as health care providers are only permitted to use and disclose patient PHI as permitted by HIPAA rules. These enforcement actions also reinforce the need to have robust HIPAA policies and procedures in place and for health care