Exercise Your Rights
Your comprehensive guide to exercising your HIPAA rights and protecting your health information. Take control of your data with our step-by-step instructions.
Know Your Rights: You cannot be charged for making requests, cannot be denied care for exercising your rights, and cannot face retaliation for filing complaints. Learn more about the legal framework protecting these rights.
Too Complex? Let Us Handle It For You
HealthConsentยฎ automates all your privacy requests and protections
Access Medical Records
Complete step-by-step process
Step-by-Step Process
- 1
Submit written request to your healthcare provider's medical records department
- 2
Specify the exact records you want (date range, type of records, etc.)
- 3
Provide identification and verify your identity
- 4
Choose format: paper copies, electronic files, or secure portal access
- 5
Pay any applicable copying fees (must be reasonable cost)
- 6
Receive records within 30 days (extendable to 60 days)
Pro Tips for Success
-
Request electronic format to potentially reduce costs
-
Be specific about dates and types of records needed
-
Keep copies of your request and all correspondence
-
If denied, ask for written explanation of denial reason
Ready-to-Use Request Letter
Dear Medical Records Department, I am writing to request copies of my complete medical records under my rights guaranteed by HIPAA. Patient Information: - Full Name: [Your Full Name] - Date of Birth: [MM/DD/YYYY] - Patient ID/Account Number: [If known] Records Requested: - Complete medical records from [Start Date] to [End Date] - Include: lab results, imaging reports, physician notes, discharge summaries - Preferred format: Electronic (PDF) if available Please contact me at [Phone] or [Email] if you need additional information. Sincerely, [Your Name] [Date]
Remember to fill in all bracketed placeholders with your specific information
Request Record Amendment
Complete step-by-step process
Step-by-Step Process
- 1
Submit written amendment request to healthcare provider
- 2
Clearly identify the specific information you believe is incorrect
- 3
Explain why you believe the information is wrong or incomplete
- 4
Provide supporting documentation if available
- 5
Provider has 60 days to respond to your request
- 6
If approved, amendment is made and shared with relevant parties
- 7
If denied, you can submit a statement of disagreement
Pro Tips for Success
-
Be specific about what needs to be changed and why
-
Include any supporting medical documentation
-
Keep detailed records of all communications
-
Your statement of disagreement becomes part of your record if amendment is denied
Ready-to-Use Request Letter
Dear Medical Records Department, I am requesting an amendment to my medical records under HIPAA regulations. Patient Information: - Full Name: [Your Full Name] - Date of Birth: [MM/DD/YYYY] - Patient ID: [If known] Amendment Requested: - Record Date: [Date of record to be amended] - Current Information: "[Exact text that needs correction]" - Requested Change: "[What it should say instead]" - Reason: [Detailed explanation of why the change is needed] Supporting Documentation: [List any attached documents] Please respond within 60 days as required by law. Sincerely, [Your Name] [Date]
Remember to fill in all bracketed placeholders with your specific information
File Privacy Complaint
Complete step-by-step process
Step-by-Step Process
- 1
File complaint within 180 days of when you knew about the problem
- 2
Contact the healthcare provider's privacy officer first (optional but recommended)
- 3
File complaint with HHS Office for Civil Rights (OCR)
- 4
Include detailed description of the privacy violation
- 5
Provide supporting documentation and evidence
- 6
OCR reviews complaint and may investigate
- 7
Receive notification of investigation outcome
Pro Tips for Success
-
Document everything: dates, times, people involved
-
Keep copies of all correspondence and evidence
-
File promptly - don't wait until the 180-day deadline
-
You cannot be retaliated against for filing a complaint
Ready-to-Use Request Letter
HHS Office for Civil Rights Attention: HIPAA Privacy Complaint I am filing a complaint regarding a violation of my HIPAA privacy rights. Patient Information: - Full Name: [Your Full Name] - Date of Birth: [MM/DD/YYYY] - Contact: [Phone and Email] Healthcare Provider: - Name: [Provider/Organization Name] - Address: [Complete Address] Violation Details: - Date of Incident: [MM/DD/YYYY] - Description: [Detailed description of what happened] - Privacy Right Violated: [Which right was violated] - People Involved: [Names and roles if known] I have attached supporting documentation. Sincerely, [Your Name] [Date]
Remember to fill in all bracketed placeholders with your specific information
HHS Office for Civil Rights
File HIPAA privacy complaints
Phone
1-800-368-1019
Website
https://www.hhs.gov/ocr
Online Options
OCR Complaint Portal available online
Your Healthcare Provider
Medical records requests, privacy concerns
Phone
Check your Notice of Privacy Practices
Usually listed in patient portal
Website
Provider website patient resources
Online Options
Patient portal for record access
Your State Health Department
State-specific privacy rights
Phone
Varies by state
Check state health department website
Website
State health department website
Online Options
State complaint systems may be available
Important Reminders
Key points to remember when exercising your rights
Time Limits
You have 180 days from when you knew about a privacy violation to file a complaint with OCR.
No Retaliation
Healthcare providers cannot retaliate against you for exercising your privacy rights.