Arizona Health Privacy Rights

Medical Records Confidentiality: Arizona statutes (A.R.S. §§ 12-2291 to 12-2297) affirm that patients have a right to access their medical records and require written patient authorization for release of records except as permitted by law. This essentially mirrors HIPAA – e.g., consent is needed for disclosures outside treatment, payment, operations.

Psychotherapy Notes: Arizona specifically defines and protects "privileged psychiatric/psychological communications," generally requiring patient consent or a court order for disclosure, giving patients added privacy for mental health info.

Timeline: Arizona law implicitly defers to HIPAA's access timeline; no stricter state deadline (providers must act within 30 days per HIPAA).