Skip to main content
U.S. flag

An official website of the United States government

Here’s how you know

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

HTTPS

Secure .gov websites use HTTPS
A lock (LockA locked padlock) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

HHS.gov
  • About HHS
  • Programs & Services
  • Grants & Contracts
  • Laws & Regulations

Breadcrumb

  1. Home
  2. About
  3. News
  4. HHS Civil Rights Office Resolves HIPAA Right of Access Investigation with $20,000 Settlement
  • News
  • Blog
  • HHS Live
  • Podcasts
  • Media Guidelines for HHS Employees
FOR IMMEDIATE RELEASE
December 15, 2022
Contact: HHS Press Office
202-690-6343
media@hhs.gov

HHS Civil Rights Office Resolves HIPAA Right of Access Investigation with $20,000 Settlement

Today, the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services announced a settlement with Health Specialists of Central Florida Inc., a provider in Florida that provides primary care, concerning a potential violation of the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule's right of access provision. The rule requires that patients be able to access their health information in a timely manner. This investigation marks the 42nd case to be resolved under OCR’s HIPAA Right of Access Initiative, designed to improve compliance by regulated entities with the law. Health Specialists of Central Florida Inc. paid $20,000 to OCR and agreed to implement a corrective action plan (CAP) to resolve this investigation.

“The right of patients to access their health information is one of the cornerstones of HIPAA, and one that OCR takes seriously. We will continue to ensure that health care providers and health plans take this right seriously and follow the law,” said OCR Director, Melanie Fontes Rainer. “Today’s announcement speaks to the importance of accessing information and regulated entities taking steps to implement i procedures and workforce training to ensure that they are doing all they can to help patients access.”

In August 2019, a complaint was filed by a daughter acting as a personal representative on behalf of her deceased father, who had been a patient of Health Specialists of Central Florida Inc. The complainant alleged that Health Specialists of Central Florida Inc.  had failed to provide her with timely access to the requested medical records, despite multiple requests.

OCR’s investigation determined that Health Specialists of Central Florida Inc.'s failure to provide timely access to the requested medical records was a potential violation of the HIPAA right of access standard, which requires a covered entity to take action on an access request within 30 days of receipt (or within 60 days if an extension is applicable). As a result of OCR's investigation, the daughter finally received all of the requested records, nearly five months after her initial request.

In addition to the monetary settlement, Health Specialists of Central Florida Inc. will undertake a corrective action plan that includes two years of monitoring. A copy of the resolution agreement and corrective action plan may be found at: https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/health-specialists-ra-cap/index.html.

OCR’s guidance on the right of access is available at https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/access/index.html.

OCR is committed to ensuring that the privacy and security of peoples’ health information is protected under HIPAA. If you believe that your or another person’s health information privacy or civil rights have been violated, you can file a complaint with OCR at: https://www.hhs.gov/ocr/complaints/index.html.

###
Note: All HHS press releases, fact sheets and other news materials are available at https://www.hhs.gov/news.
Like HHS on Facebook, follow HHS on Twitter @HHSgov, and sign up for HHS Email Updates.
Last revised: December 15, 2022

Sign Up for Email Updates

Receive the latest updates from the Secretary, Blogs, and News Releases

Sign Up

Subscribe to RSS

Receive latest updates

Subscribe to our RSS

Related News Releases

  • 美國衛生與公眾服務部發布為英語能力有限者增加語言使用服務的報告

  • 美国卫生与公众服务部发布有关为英语水平有限人群增加语言协助服务的报告

  • HHS Office for Civil Rights Settles HIPAA Investigation with Arkansas Business Associate MedEvolve Following Unlawful Disclosure of Protected Health Information on an Unsecured Server for $350,000

Related Blog Posts

  • HHS Blog thumbnail

    Improving the Cybersecurity Posture of Healthcare in 2022

Media Inquiries

For general media inquiries, please contact media@hhs.gov.

Content created by Office for Civil Rights (OCR)
Content last reviewed December 15, 2022
Back to top
  • Contact HHS
  • Careers
  • HHS FAQs
  • Nondiscrimination Notice
  • HHS Archive
  • Accessibility
  • Privacy Policy
  • Viewers & Players
  • Budget/Performance
  • Inspector General
  • Web Site Disclaimers
  • EEO/No Fear Act
  • FOIA
  • The White House
  • USA.gov

Sign Up for Email Updates

Receive the latest updates from the Secretary, Blogs, and News Releases.

Sign Up
HHS Logo

HHS Headquarters

200 Independence Avenue, S.W.
Washington, D.C. 20201
Toll Free Call Center: 1-877-696-6775​