On December 12, OCR announced that it had reached a settlement with Korunda Medical, a Florida-based primary care and interventional pain management practice, over alleged violations of HIPAA as part of OCR’s Right of Access Initiative. This is the second enforcement action under this Initiative. In March 2019, OCR received a complaint that Korunda failed to forward a patient’s medical record to a third party. The patient had requested the transfer in an electronic format, but Korunda did not comply with the requested format for the transfer. In addition, OCR discovered that Korunda charged more than the cost-based fees permitted under HIPAA. Korunda agreed to pay $85,000 and will undertake a corrective action plan which includes one year of monitoring.