The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services announces its seventeenth settlement of an enforcement action in its HIPAA Right of Access Initiative.OCR announced this initiative to support individuals’ right to timely access to their health records at a reasonable cost under the HIPAA Privacy Rule.
The Arbour, Inc., doing business as Arbour Hospital (“Arbour”), has agreed to take corrective actions and pay $65,000 to settle a potential violation of the HIPAA Privacy Rule’s right of access standard. Arbour is located in Massachusetts and provides behavioral health services.
