The Department of Health and Human Services' Office of Civil Rights settled 11 more possible HIPAA right of access violations, including a civil monetary penalty levied against ACPM in Illinois for failing to provide a patient access or respond to OCR.