OCR releases new HIPAA guidance to reiterate patients’ right to access health information and clarify appropriate fees for copies