◆St. Joseph’s Hospital and Medical Center in Phoenix, Arizona, has agreed to pay $160,000 and adopt corrective measures to settle a potential violation of the HIPAA Privacy Rule’s right of access provision, the HHS Office for Civil Rights (OCR) said Oct. 7.^[1] A mother complained to OCR in April 2018 that starting in January of that year, she made multiple requests to St. Joseph’s for a copy of her son’s medical records. The hospital produced some but not all of them, despite follow-up requests from the mother, who is her son’s personal representative, OCR said. “As a result of OCR’s investigation, [the hospital] sent all of the requested medical records to the mother on December 19, 2019, more than 22 months after her initial request,” OCR said. In the resolution agreement with OCR, St. Joseph’s did not admit liability.