The Complaint
HHS OCR says that in June 2019, it received a complaint alleging that Sharp failed to take timely action in response to a patient s records access request directing that an electronic copy of protected health information in an electronic health record be sent to a third party.
OCR says it provided Sharp with technical assistance on the HIPAA right of access requirements. But in August 2019, OCR received a second complaint alleging that Sharp still had not responded to the patient s records access request.
OCR initiated an investigation, and Sharp eventually provided access to the requested records.
Corrective Actions
As in OCR s 15 previous right of access settlements with other entities, in addition to the monetary settlement, Sharp will undertake a corrective action plan that includes two years of monitoring.