HIPAA Privacy Rule — Individual Right of Access
Enforced by: HHS OCR (US)
Current as of March 26, 2013
Plain Language Summary
Patients have the right to access their own medical records within 30 days. Fee cannot exceed cost-based fee. Electronic records must be provided electronically if requested.
Except as otherwise provided, an individual has a right of access to inspect and obtain a copy of protected health information about the individual in a designated record set. A covered entity must act on a request for access no later than 30 days after receipt of the request. The covered entity may extend the time for such action by no more than 30 days with written notice.