OCR enforcement of the HIPAA Right of Access continues to be one of the most active and costly areas of regulatory oversight for healthcare organizations. This webinar provides a detailed, case-driven review of OCR complaint investigations and civil monetary penalties (CMPs), highlighting the most common operational failures that lead to enforcement actions.
Using real OCR cases, the session walks through critical compliance requirements including patient and personal representative access rights, designated record set obligations, form and format requirements, timeliness standards, permissible denial grounds, and patient fee limitations. Participants will gain insight into how OCR uses technical assistance, when failure to act escalates to penalties, and what organizations must do to mitigate risk. The presentation emphasizes practical, operational steps HIM, privacy, and compliance teams can implement immediately to avoid costly enforcement actions.
Learning Objectives
After attending this session, participants will be able to:
- Explain the OCR complaint and enforcement process related to HIPAA Right of Access violations.
- Identify the most common causes of OCR civil monetary penalties, including failures related to timeliness, designated record sets, form and format, and patient fees.
- Apply HIPAA Right of Access requirements for patients and personal representatives in accordance with 45 C.F.R. § 164.524 and § 164.502(g).
- Distinguish between reviewable and unreviewable grounds for denial of access and describe appropriate documentation requirements.
- Implement operational safeguards and workflows to reduce the risk of OCR investigations, corrective action plans, and civil monetary penalties.
About our Speaker:
Elizabeth Delahoussaye, RHIA, CHPS, is a nationally recognized healthcare privacy, compliance, and health information management leader with more than 30 years of experience in healthcare. As Chief Privacy Officer for Sharecare, Elizabeth leads privacy strategy, regulatory compliance, and risk mitigation initiatives, with deep expertise in HIPAA, HITECH, release of information, patient access, OCR enforcement, and evolving federal and state privacy requirements.
Elizabeth has held numerous leadership roles within the health information profession, including serving on the AHIMA Board of Directors and as Speaker of the AHIMA House of Delegates. She has also served as President of the Tennessee Health Information Management Association and continues to serve the profession through AHIMA and industry leadership activities.
A frequent national speaker and advocate for the HIM profession, Elizabeth is known for translating complex regulatory requirements into practical strategies for healthcare organizations. She regularly engages in healthcare policy and legislative discussions and has provided testimony on proposed healthcare privacy legislation.
Elizabeth has been recognized by Becker’s Hospital Review for her leadership in health information technology, including being named among its “Women in Health IT to Know” and “Women in Health IT to Watch.”
After registering, you will receive a confirmation email containing information about joining the webinar.
CMGMA webinars are approved for 1.0 CE credit hour of LIVE learning from MGMA for those attending the live session.
CMGMA Webinars are approved for 1.0 CE credit hour from MGMA for on-demand listening.
