Patient information protection laws

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) governed by the U.S. Department of Health and Human Services' Office of Civil Rights establishes rules that ensure the privacy of Americans' individually identifiable health information. These rules protect the economically disadvantaged as well because government programs that pay for health care such as Medicare and Medicaid are covered entities under HIPAA.

Right to Request Information

American health care consumers have the right to request copies of their medical records or other related information from their health care providers. Under HIPAA, providers must give the requested information within 30 days of the request or 60 days with an adequate reason. Consumers may be charged only for the cost of copying and mailing information.

Right to Corrections

HIPAA gives health care consumers the right to request a documented change to medical records in the form of new or additional information to correct any noted discrepancies. If a medical facility disagrees, consumers still have the right to have the difference of opinion noted in their file. HIPAA requires consumer requested corrections be made within 60 days of the request. With an adequate reason, this time may be extended to 90 days.