HHS’ Office for Civil Rights Settles HIPAA Right of Access Investigation with Concentra, Inc.
OCR’s investigation determined Concentra failed to provide timely access to an individual’s PHI within 30 days.
OCR and Concentra resolved this enforcement action with a settlement agreement and payment by Concentra of $112,500.
The enforcement action stems from an investigation that OCR initiated after receiving a complaint that an individual was not given timely access to his health information, despite making six requests beginning in February 2018. The individual did not receive access to his health information until March 2019, more than a year after his initial request.
“Under the HIPAA Privacy Rule, individuals or their personal representatives have the right to timely access their medical records,” said OCR Director Paula M. Stannard. “Individuals should not have to make multiple requests and file a complaint with OCR to gain access to their health information.”
The Notice of Proposed Determination may be found at: https://www.hhs.gov/sites/default/files/ocr-concentra-npd.pdf [PDF, 291 KB]
The Settlement Agreement may be found at: https://www.hhs.gov/sites/default/files/ocr-concentra-settlement-agreement.pdf [PDF, 181 KB]
CME Online will present a webinar HIPAA Update 2026 on Thursday Jan 15 at 7 PM Eastern time. Among the topics that will be discussed is the HIPAA Right of Access Rule. To register for this webinar visit : https://attendee.gotowebinar.com/rt/1698215951846425175

Read Comments