HHS has agreed to accept, andAssociated Retina Specialists has agreed to pay HHS, the amount of $22,500 (“Resolution Amount”). In consideration of the Parties’ interest in avoiding the uncertainty, burden, and expense of formal proceedings, the Parties agree to resolve this matter according to the Terms and Conditions below. This Agreement is intended to resolve HHS TN 21-414211 and any violations of the HIPAA Rules related to the Covered Conduct specified in paragraph I.2 of this Agreement. Intention of Parties to Effect Resolution.This Agreement is not a concession by HHS that Associated Retina Specialists is not in violation of the HIPAA Rules and not liable for civil money penalties. This Agreement is not an admission of liability by Associated Retina Specialists. Associated Retina Specialists failed to provide timely access to protected health information.HHS’s investigation indicated that the following conduct occurred (“Covered Conduct”): Associated Retina Specialists did not provide the complainant with a copy of her records until three days after OCR initiated its investigation in March, and nearly five months after the complainant’s first written request. On February 18, 2021, the complainant filed a complaint with OCR alleging that Retina Specialists failed to provide her with a copy of her medical records. Factual Background and Covered Conduct.HHS and Associated Retina Specialists shall together be referred to herein as the “Parties.” Associated Retina Specialists is a small ophthalmology practice and is located in New York, New York.

§ 160.103, and therefore is required to comply with the HIPAA Rules.

Associated Retina Specialists is a covered entity, as defined at 45 C.F.R.

HHS has the authority to conduct compliance reviews and investigations of complaints alleging violations of the Privacy, Security, and Breach Notification Rules (the “HIPAA Rules”) by covered entities and business associates, and covered entities and business associates must cooperate with HHS compliance reviews and investigations. Part 164, the “Breach Notification Rule”). Part 160 and Subparts A and D of 45 C.F.R. Part 160 and Subparts A and C of Part 164, the “Security Rule”), and the Federal standards for notification in the case of breach of unsecured protected health information (45 C.F.R. Part 160 and Subparts A and E of Part 164, the “Privacy Rule”), the Federal standards that govern the security of electronic individually identifiable health information (45 C.F.R.

The United States Department of Health and Human Services, Office for Civil Rights (“HHS”), which enforces the Federal standards that govern the privacy of individually identifiable health information (45 C.F.R.The Parties to this Resolution Agreement (“Agreement”) are:

Associated retina specialists pllc