tci Medicare Compliance & Reimbursement - 2023 Issue Q1
HIPAA: OCR Kicks New Year Off With Right of Access Settlement
Subscribe or sign in to view the full article.
Article Overview
This article covers recent HIPAA Right of Access settlement activity from the HHS Office for Civil Rights and discusses the compliance steps organizations may want to review in response. It is aimed at privacy, compliance, and healthcare operations teams that handle medical records requests, workforce training, policy updates, and third-party access concerns. The piece also points readers to related OCR resources and enforcement summaries for context.
Why This Topic Matters
Right of Access remains an active area of HIPAA enforcement, so organizations that manage patient records need to understand current OCR expectations and operational risk areas. The article is useful for entities that want to review policies, training, documentation practices, and request-handling workflows in light of recent enforcement activity.
Article Sections
-
Background
Introduces the recent enforcement context and summarizes how the initiative has developed over time. It frames the article’s focus on recent settlement activity and broader compliance attention from OCR.
-
Two recent settlements
Summarizes two recent OCR resolutions involving delayed access to records in different care settings. The section describes the general circumstances, settlement outcomes, and monitoring components.
-
Add These Right of Access Tips to Your HIPAA Wheelhouse
Outlines general compliance themes organizations may consider when reviewing Right of Access policies and related procedures. It emphasizes staff education, documentation, third-party issues, timelines, and policy maintenance.
What You Will Learn
- How recent OCR enforcement activity fits into the broader HIPAA Right of Access initiative
- What operational areas organizations may review when updating access-to-records policies
- Why workforce training and written procedures are important in access-request workflows
- How third-party request handling and documentation practices factor into compliance planning
- Where to find OCR guidance and related enforcement resources
Who Should Read This
- HIPAA compliance professionals
- Privacy officers
- Healthcare administrators
- Medical records staff
- Clinic and laboratory operations teams
- Healthcare attorneys
- Revenue cycle and compliance consultants
Subscribe or sign in to view the full article.
Thank you for choosing Find-A-Code, please Sign In to remove ads.


Quick, Current, Complete - www.findacode.com