OCR is enforcing the patient's Right to Access their own health data. The first fine for a Right to Access violation was just levied.