HIPPA Records Request: Healthcare Provider to Pay $5000 HHS Fine

A covered entity refused to comply with an individual’s request for their child’s PHI in violation of the HIPAA Privacy and Security Rules; policies and procedures must be updated to identify methods for calculating reasonable cost-based fees for access requests, the status of requests received must be reported to the HHS every 90 days, and all workforce members must receive training on individuals’ right to PHI access.