The U.S. Department of Health and Human Services' Office for Civil Rights announced its 47th settlement under the Health Insurance Portability and Accountability Act Right of Access Initiative. Under the settlement, Oklahoma-based nursing care company Phoenix Healthcare agreed to pay USD35,000 and revise its HIPAA policies and procedures to "address the Privacy Rule's requirements concerning an individual's right of access to Protected Health Information."
1 April 2024
OCR, nursing care company settle HIPAA Right of Access Initiative dispute
Related stories
Notes from the IAPP Canada: Are good intentions enough to stay on top of potential data breaches?
A view from DC: Can consumer protection enforcement unduly burden AI innovation?
CPPA Board finalizes long-awaited ADMT, cyber audit, risk assessment rules
A view from Brussels: Will the Data Union Strategy finally lead to the European data single market?
Notes from the Asia-Pacific region: OPC releases inquiry report on FRT trial