◆ West Virginia-based Diabetes, Endocrinology & Lipidology Center Inc. (DELC) has agreed to pay $5,000 to settle a potential violation of the HIPAA Privacy Rule, the HHS Office for Civil Rights (OCR) said June 2.^[1] This is the 19th settlement of an enforcement action in its HIPAA Right of Access Initiative. A complaint was filed with OCR in early 2019 alleging that DELC didn’t take timely action in response to a parent’s July 2019 request for her minor child’s protected health information. OCR investigated “and determined that DELC’s failure to provide timely access to the requested medical records was a potential violation of the HIPAA right of access standard. As a result of OCR's investigation, DELC provided the requested records in May 2021, nearly two years after the parent’s request,” OCR contends. DELC didn’t admit liability in the resolution agreement.^[2]