PHI & Data
Right of Access
A patient's HIPAA right to inspect and obtain a copy of their own health information.
The Right of Access is a patient's HIPAA Privacy Rule right to inspect and obtain a copy of their own protected health information (PHI) held in a designated record set.
Covered entities generally must respond within 30 days and may only charge a reasonable, cost-based fee. Failure to honor the Right of Access has been a frequent target of OCR enforcement, making reliable access and export capabilities important for any platform hosting patient data.