The U.S. Department of Health and Human Services' Office for Civil Rights announced its 47th settlement under the Health Insurance Portability and Accountability Act Right of Access Initiative. Under the settlement, Oklahoma-based nursing care company Phoenix Healthcare agreed to pay USD35,000 and revise its HIPAA policies and procedures to "address the Privacy Rule's requirements concerning an individual's right of access to Protected Health Information."
1 April 2024
OCR, nursing care company settle HIPAA Right of Access Initiative dispute
RELATED STORIES
Controllers, processors and subprocessors in chains
Notes from the IAPP Canada: Recommendations, calls to reform Privacy Act 'a good start'
A view from DC: Marriott and the minimum extent necessary
Retrospective: 2024 in state sectoral privacy law and AI law
Notes from the Asia-Pacific region: India's PM talks global governance for digital technology