Banner Health to Pay OCR $200K for HIPAA Right of Access Failures
“The Department of Health and Human Services Office for Civil Rights reached a $200,000 civil monetary penalty and a corrective action plan with Banner Health, to resolve potential violations of the HIPAA Privacy Rule Right of Access standard,” reports Jessica Davis in Health IT Security’s HIPAA and Compliance News.
“The Arizona-based healthcare system is one of the largest in the US, with more than 30 hospitals and a range of primary care, urgent care, and specialty facilities. The settlement covers more than 74 covered entities included under the Banner Health umbrella.”
“Announced as an enforcement priority in 2019, the OCR RIght of Access Initiative is designed to support the right of patients to access their medical records in a requested format and in a timely fashion, for a reasonable fee. While required under HIPAA, data shows many providers fail to meet the privacy rule requirements.”
