OCR Announces 11 More Access Enforcement Actions: OCR has adopted a special enforcement focus on covered entities that fail to provide patients with access to their PHI. These cases often involve lower fines than we usually see for breaches and larger/more systemic failures to comply with HIPAA obligations. Last week, OCR announced 11 new access enforcement actions.
The fines range from $3,500 to $240,000, and 9 of the 11 matters have fines of $65,000 or less.