Patients have the right to access their health records under the Health Insurance Portability and Accountability Act’s Privacy Rule, and covered health care providers could face fines if they fail to provide them with timely access.
In October, the U.S. Department of Health and Human Services’ Office for Civil Rights imposed a $70,000 penalty against a Maryland dental practice for allegedly violating Privacy Rule requirements.
The rule’s right of access provisions state that individuals and their personal representatives have the right to inspect and obtain a copy of their protected health information within 30 days of requesting access from their health care provider. The deadline can be extended once by another 30 days, and providers can charge a reasonable fee to cover the costs associated with providing access.