The majority of medical record providers are not compliant with the HIPAA Right of Access.
Play Video
The Patient
Record Scorecard
Showing medical record providers’ compliance with the HIPAA Right of Access based on patient requests.
Providers without a score:
View the HIPAA Right of Access Survey to see an indication of compliance.
What does it mean to be compliant with the HIPAA Right of Access?
Record requests must be accepted by email or fax.
Records must be sent in the format requested - if that format can be readily produced - and to the designated recipient.
Records must be sent within 30 days.
No unreasonable fees should be charged for records.
Want to improve your score?
When you’re sick, and you’re frightened, and you’re fighting for your life, that is not the time to have trouble gathering your data.
YVETTE
Diagnosed with Ovarian Cancer,
September 2, 2016
Patient Stories
Play Video
"Getting my records was so difficult, it was easier to repeat the tests for every new provider I saw."
Tamira
Diagnosed with breast cancer, May 16, 2016
Play Video
"I am a cancer warrior, and data is one of my most powerful weapons."
Yvette
Diagnosed with Ovarian Cancer, September 2, 2016
Play Video
"I need to get my records in a timely fashion so I can go about planning my treatment path"
Susan
Metastatic breast cancer since March 2014
Highlighting Five-Star Providers
“We have had multiple requests sent to Dana Farber/Brigham and Women’s, and from the beginning they have stayed on top of every request and fulfilled them within 3-5 days. As a renowned cancer care facility, we know they are busy, and we appreciate that they prioritize patient requests.”
Lisa Taylor
Sr. Health Records Specialist
Ciitizen
“CPMC Davies is part of Sutter Health, so the volume of requests across all of their locations is high. They reach out to us directly to confirm requests, which we usually have to do ourselves. In the most recent request, they sent records in just three days. Having these records promptly can be critical for a cancer patient.”
Lisa Taylor
Sr. Health Records Specialist
Ciitizen
Our Supporters
Organizations that support putting the patient, and their right to access all of their medical information, first.
The HIPAA Right of Access Webinar Series
Join Deven McGraw, Chief Regulatory Officer at Ciitizen, to discuss HIPAA Right of Access regulations, increased OCR enforcement, removing unnecessary friction, and putting patients first.
View previous webinars.
Sign up to receive information about:
Patient Record Scorecard updates, upcoming HIPAA Right of Access webinars, personalized webinars for your team, in-person feedback about improving your score, and more.