HHS OCR continues to advance its 2019 initiative to enforce individuals’ rights under the HIPAA Privacy Rule to timely access to their health records at a reasonable cost. OCR settled five cases involving complaints by an individual or an individual’s representative. The fines imposed range from a $3,500 to $70,000 and the providers are subject to corrective action plans that include up to two years of monitoring.