Responding To Requests for Medical Records - Patient Access Request Versus HIPAA Authorization: Who, When, How Much? 

Course Curriculum
Health care providers often receive requests for copies of medical records. The legal requirements for responding to these requests can vary based on a variety of factors, including who originates the request, the purpose of the request, and the recipient. Faculty will discuss the differences between two common request types under HIPAA – a “patient access request” and an “authorization.” They will also explain what HIPAA requires for each request with regard to timing of response and fees that may be charged, as well as provide tips for identifying the type of request received. 

Learning Objectives
At the conclusion of this session, the participants will be able to:
1. Identify the key differences between a "patient access request" and an "authorization" under HIPAA.
2. Explain the requirements for responding to each type of request.
3. Discuss the options and restrictions for calculating fees for producing requested records.
4. List practical tips to remeber when presented with a request for medical records.

Target Audience
This session is recommended for medical records personnel, compliance staff, privacy and security officers, risk management personnel, in-house counsel and any other individual responsible for responding to requests for copies of medical records.