OCR continues to prioritize its HIPAA Right of Access Initiative by settling allegations that Village Plastic Surgery ("VPS") failed to take timely action in response to a patient's records access request made in August 2019. In addition, VPS failed to provide a copy of the records while OCR was investigating the allegations. This is OCR’s eighteenth settlement under the HIPAA Right of Access Initiative. OCR announced this initiative to support individuals' right to timely access of their health records at a reasonable cost under the HIPAA Privacy Rule. VPS has agreed to pay $30,000 and will undertake a corrective action plan that includes two years of monitoring.