August 6, 2024 Did you know the Office for Civil Rights (OCR) has launched a new initiative to ensure proper compliance with patients’ Rights of Access? American Medical Response (AMR), a private ambulance company, has now felt the impact of these efforts, becoming the 49th entity to face a HIPAA Right of Access Enforcement Action. AMR was recently fined $115,200 for failing to provide a patient with their medical records in a timely fashion. AMR’s mistake was brought to the attention of the OCR through a patient complaint. On October 31, 2018, the patient requested a copy of her medical records. Instead of receiving them within the allotted 30 days, this sparked the beginning of a long battle for her records. In January 2019, the patient sent follow-up requests to both AMR and its Business Associate, Centrex. AMR responded to the request in March 2019, sending the patient an invoice and requiring payment before the records were provided. During the ongoing battle for her medical records, she warned AMR she would report the organization to the OCR if her records were not provided. The patient filed a complaint in July 2019. Finally, the records were provided on November 5, 2019, over a year after the initial request. What is Right of Access? HIPAA’s Right of Access rule, which falls under the HIPAA Privacy Rule, allows patients to receive access to their medical records within 30 days with minimal or no charges. These charges can only include the costs of copying and mailing medical records. In some states, this 30-day requirement is shorter, like in California, which requires access to copies within 15 days. This right empowers patients to make informed healthcare decisions, such as sharing their medical history with new providers. What should my practice do? First, proper training is essential to ensure that staff understand the importance of providing patients with their records on time. Additionally, staff must understand and follow the procedures for securely sharing medical information with the patient. Ensuring staff is properly trained and aware of the resources available to them is vital to staying compliant. You could be adding more stress to your plate if you still use a dusty binder to track and manage HIPAA compliance. Keeping track of training, documentation, and the constantly evolving regulations is a complex task that demands a modern approach. Intelligent software solutions can offer staff a centralized compliance hub with everything they need to know when navigating patient requests. To learn more about how smart compliance software solutions can protect your practice, schedule a consultation with an expert today.
