More than a quarter of medical record providers are not compliant with the HIPAA Right of Access.
The Patient
Record Scorecard
Showing medical record providers’ compliance with the HIPAA Right of Access based on patient requests.
Providers without a score:
View the HIPAA Right of Access Survey to see an indication of compliance.
What does it mean to be compliant with the HIPAA Right of Access?
Record requests must be accepted by email or fax.
Records must be sent in the format requested – if that format can be readily produced.
Records must be sent within 30 days.
No unreasonable fees should be charged for records.
Want to improve your score?
When you’re sick, and you’re frightened, and you’re fighting for your life, that is not the time to have trouble gathering your data.
YVETTE
Diagnosed with Ovarian Cancer,
September 2, 2016
Patient Stories
Play Video
"Getting my records was so difficult, it was easier to repeat the tests for every new provider I saw."
Tamira
Diagnosed with breast cancer, May 16, 2016
Play Video
"I am a cancer warrior, and data is one of my most powerful weapons."
Yvette
Diagnosed with Ovarian Cancer, September 2, 2016
Play Video
"I need to get my records in a timely fashion so I can go about planning my treatment path"
Susan
Metastatic breast cancer since March 2014
Highlighting Five-Star Providers
“[The Scorecard] helps patients understand and know that we value their rights—that their right to access is very important to us and we hold it very high in terms of patient satisfaction as well as from the clinical perspective…. We understand the impact that [access to their records] may have on their overall care.”
Chana Feinberg
RHIA, Director of HIM and Clinical Documentation Improvement (as reported in For the Record Magazine, March 2020)
“City of Hope Duarte Cancer Center has truly demonstrated their commitment to putting the patient first. Their medical records request fulfillment process is an excellent example of how seamless it can and should be for patients to be able to obtain all of their health information.”
Lisa Taylor
Director, Records Retrieval, Ciitizen
Our Supporters
Organizations that support putting the patient, and their right to access all of their medical information, first.
The HIPAA Right of Access Webinar Series
Join Deven McGraw, Chief Regulatory Officer at Ciitizen, to discuss HIPAA Right of Access regulations, increased OCR enforcement, removing unnecessary friction, and putting patients first.
View previous webinars.
Sign up to receive information about:
Patient Record Scorecard updates, upcoming HIPAA Right of Access webinars, personalized webinars for your team, in-person feedback about improving your score, and more.