OCR Announces Four Enforcement Actions

Share on facebook
Share on twitter
Share on linkedin
Share on reddit

On March 28, 2022, Health and Human Services, Office for Civil Rights (OCR) announced the resolution of four enforcement actions, three resolved in 2021 and one resolved in 2022. There are some interesting aspects of this group of covered entities. Three of the actions pertained to dental practices. One of those dental practices took the rare approach of never responding to OCR’s data request, never acknowledging or responding to OCR’s administrative subpoena, and then did not contest OCR’s findings in the Notice of Proposed Determination. Another dental practice used its patient list to fundraise for an unsuccessful state senate campaign.

Less unusual, however, are the HIPAA Privacy Rule violations that the settlements focus on, which underscore the continued importance of (and OCR’s attention to) the following practices:

Timely responding to and fulfilling patients’ access requests, and charging appropriate cost-based fees only. Ensuring employee training and HIPAA policies and procedures are implemented and well documented. Naming a privacy official within the covered entity’s workforce.

Read more

Explore the site

More from the blog

Latest News