The Complaint
HHS OCR says that in June 2019, it received a complaint alleging that Sharp failed to take timely action in response to a patient's records access request directing that an electronic copy of protected health information in an electronic health record be sent to a third party.
OCR says it provided Sharp with technical assistance on the HIPAA right of access requirements. But in August 2019, OCR received a second complaint alleging that Sharp still had not responded to the patient's records access request.
OCR initiated an investigation, and Sharp eventually provided access to the requested records.
Corrective Actions
As in OCR's 15 previous right of access settlements with other entities, in addition to the monetary settlement, Sharp will undertake a corrective action plan that includes two years of monitoring.