On September 3, 2025, the U.S. Department of Health and Human Services unveiled a major enforcement initiative targeting practices that restrict patient access to their own electronic health information (EHI).