6. If a patient requests to inspect or obtain a copy of his/her medical records, do we have to accommodate the request immediately while the patient waits?
No. University employees should arrange a convenient time and place for the patient to inspect or obtain a copy of his/her PHI or may mail a copy of the information at the patient's written request (the Authorization form). No release may be made until the patient completes an Authorization to Release/Request for an Individual's Health Information form, available on the HIPAA Privacy Forms web page. University Personnel may discuss the scope, format, and other aspects of the request for access with the patient as necessary to facilitate timely access.
In all cases, access must be provided within 30 days of the request.
Patients may be charged for the copy. See the Patient Access to PHI policy on the HIPAA website for specific costs.
Return to FAQ List