Exercise Your Rights

Your comprehensive guide to exercising your HIPAA rights and protecting your health information. Take control of your data with our step-by-step instructions.

Know Your Rights: You cannot be charged for making requests, cannot be denied care for exercising your rights, and cannot face retaliation for filing complaints. Learn more about the legal framework protecting these rights.

Too Complex? Let Us Handle It For You

HealthConsentยฎ automates all your privacy requests and protections

View Plans

Access Medical Records

Complete step-by-step process

โฑ๏ธ 30-60 days ๐Ÿ’ฐ Reasonable copying fees

Step-by-Step Process

  1. 1

    Submit written request to your healthcare provider's medical records department

  2. 2

    Specify the exact records you want (date range, type of records, etc.)

  3. 3

    Provide identification and verify your identity

  4. 4

    Choose format: paper copies, electronic files, or secure portal access

  5. 5

    Pay any applicable copying fees (must be reasonable cost)

  6. 6

    Receive records within 30 days (extendable to 60 days)

Pro Tips for Success

  • Request electronic format to potentially reduce costs

  • Be specific about dates and types of records needed

  • Keep copies of your request and all correspondence

  • If denied, ask for written explanation of denial reason

Ready-to-Use Request Letter

Dear Medical Records Department,

I am writing to request copies of my complete medical records under my rights guaranteed by HIPAA.

Patient Information:
- Full Name: [Your Full Name]
- Date of Birth: [MM/DD/YYYY]
- Patient ID/Account Number: [If known]

Records Requested:
- Complete medical records from [Start Date] to [End Date]
- Include: lab results, imaging reports, physician notes, discharge summaries
- Preferred format: Electronic (PDF) if available

Please contact me at [Phone] or [Email] if you need additional information.

Sincerely,
[Your Name]
[Date]

Remember to fill in all bracketed placeholders with your specific information

Request Record Amendment

Complete step-by-step process

โฑ๏ธ 60 days for response ๐Ÿ’ฐ No fee

Step-by-Step Process

  1. 1

    Submit written amendment request to healthcare provider

  2. 2

    Clearly identify the specific information you believe is incorrect

  3. 3

    Explain why you believe the information is wrong or incomplete

  4. 4

    Provide supporting documentation if available

  5. 5

    Provider has 60 days to respond to your request

  6. 6

    If approved, amendment is made and shared with relevant parties

  7. 7

    If denied, you can submit a statement of disagreement

Pro Tips for Success

  • Be specific about what needs to be changed and why

  • Include any supporting medical documentation

  • Keep detailed records of all communications

  • Your statement of disagreement becomes part of your record if amendment is denied

Ready-to-Use Request Letter

Dear Medical Records Department,

I am requesting an amendment to my medical records under HIPAA regulations.

Patient Information:
- Full Name: [Your Full Name]
- Date of Birth: [MM/DD/YYYY]
- Patient ID: [If known]

Amendment Requested:
- Record Date: [Date of record to be amended]
- Current Information: "[Exact text that needs correction]"
- Requested Change: "[What it should say instead]"
- Reason: [Detailed explanation of why the change is needed]

Supporting Documentation: [List any attached documents]

Please respond within 60 days as required by law.

Sincerely,
[Your Name]
[Date]

Remember to fill in all bracketed placeholders with your specific information

File Privacy Complaint

Complete step-by-step process

โฑ๏ธ 180 days to file ๐Ÿ’ฐ No fee

Step-by-Step Process

  1. 1

    File complaint within 180 days of when you knew about the problem

  2. 2

    Contact the healthcare provider's privacy officer first (optional but recommended)

  3. 3

    File complaint with HHS Office for Civil Rights (OCR)

  4. 4

    Include detailed description of the privacy violation

  5. 5

    Provide supporting documentation and evidence

  6. 6

    OCR reviews complaint and may investigate

  7. 7

    Receive notification of investigation outcome

Pro Tips for Success

  • Document everything: dates, times, people involved

  • Keep copies of all correspondence and evidence

  • File promptly - don't wait until the 180-day deadline

  • You cannot be retaliated against for filing a complaint

Ready-to-Use Request Letter

HHS Office for Civil Rights
Attention: HIPAA Privacy Complaint

I am filing a complaint regarding a violation of my HIPAA privacy rights.

Patient Information:
- Full Name: [Your Full Name]
- Date of Birth: [MM/DD/YYYY]
- Contact: [Phone and Email]

Healthcare Provider:
- Name: [Provider/Organization Name]
- Address: [Complete Address]

Violation Details:
- Date of Incident: [MM/DD/YYYY]
- Description: [Detailed description of what happened]
- Privacy Right Violated: [Which right was violated]
- People Involved: [Names and roles if known]

I have attached supporting documentation.

Sincerely,
[Your Name]
[Date]

Remember to fill in all bracketed placeholders with your specific information

HHS Office for Civil Rights

File HIPAA privacy complaints

Phone

1-800-368-1019

Website

https://www.hhs.gov/ocr

Online Options

OCR Complaint Portal available online

Your Healthcare Provider

Medical records requests, privacy concerns

Phone

Check your Notice of Privacy Practices

Email

Usually listed in patient portal

Website

Provider website patient resources

Online Options

Patient portal for record access

Your State Health Department

State-specific privacy rights

Phone

Varies by state

Email

Check state health department website

Website

State health department website

Online Options

State complaint systems may be available

Important Reminders

Key points to remember when exercising your rights

Time Limits

You have 180 days from when you knew about a privacy violation to file a complaint with OCR.

No Retaliation

Healthcare providers cannot retaliate against you for exercising your privacy rights.