Last year, the Office of Civil Rights (“OCR”) announced a new initiative – the HIPAA Right of Access Initiative – as an enforcement priority in support of the right of individuals to timely access of their health records under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy Rule. As of this October, OCR has settled 9 enforcement actions against healthcare organizations for failure to comply.

