HIPAA Right of Access Survey

A phone survey indicating how medical record providers are likely to comply with the HIPAA Right of Access.

Survey initiated August 2018 and is ongoing.

Want to view the Patient Record Scorecard? View here.

Contact us about your institution’s score.

Property Name

Location

INDICATES HIPAA Compliance

Sends in Format Requested (Electronic)

Sends to Patient

no unreasonable fees

101 Rowland Way Care Center101 Rowland Way, Novato, CA, 94945

Novato, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

1350 South Eliseo Drive Care Center1350 South Eliseo Drive, Greenbrae, CA, 94904

Greenbrae, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

1375 Sutter Care Center1375 Sutter Street, San Francisco, CA, 94109

San Francisco, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

1431 Noriega Street Care Center1431 Noriega Street, San Francisco, CA, 94112

San Francisco, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

1580 Valencia Street Imaging – Breast Health Center1580 Valencia Street Suite 237, San Francisco, CA, 94110

San Francisco, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

2100 Webster Street Care Center2100 Webster Street, San Francisco, CA, 94115

San Francisco, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

21st Century Oncology104-A Medical Park Dr., Andalusia, AL, 36420

Andalusia, AL

NO

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

2449 Sumerfield Road Imaging2449 Summerfield Road, Santa Rosa, CA, 95405

Santa Rosa, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

2455 Summerfield Road Care Center2455 Summerfield Road, Santa Rosa, CA, 95405

Santa Rosa, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

34 Mark West Springs Road Care Center34 Mark West Spring Road, Santa Rosa, CA, 95403

Santa Rosa, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

3700 California Street Care Center3700 California Street, San Francisco, CA, 94118

San Francisco, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

3838 Airway Drive Care Center3883 Airway Drive, Santa Rosa, CA, 95403

Santa Rosa, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

55 2nd Street Care Center55 Second Street, San Francisco, CA, 94105

San Francisco, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

850 Mill Street Care Center850 Mill Street, Reno, NV, 89502

Reno, NV

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

899 Velencia Street Care Center899 Valencia Street, San Francisco, CA, 94115

San Francisco, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

990 Somoma Avenue Care Center990 Sonoma Avenue, Santa Rosa, CA, 95403

Santa Rosa, CA

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

A Building- Crile Building2049 East 100th Street, Cleveland, OH, 44195

Cleveland, OH

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

Abilene Regional Medical Center6250 US-83, Abilene, TX, 79606

Abilene, TX

NO

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

Abingdon Medical Center3400 Box Hill Corporate Center Drive, Suite 100, Abingdon, MD, 21009

Abingdon, MD

YES

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

Abington Outpatient Center102 North Abington Rd, Suite 107, Clarks Green, PA, 18411

Clarks Green, PA

NO

Accepts Requests by Email or Fax

Sends in Format Requested (Electronic)

no unreasonable fees

HIPAA Right of Access Survey Methodology

We surveyed approximately 3000 health care institutions by phone, including hospitals and laboratories, regarding their processes for releasing digital records (including images) to patients in compliance with the HIPAA Right of Access.  We spoke directly with a representative of the Health Information Management or Patient Records department, or, in the case of images, the Radiology department.

What indicates non-compliance?

Our questions focused on the following aspects of compliance with the HIPAA Right of Access:

Will you send the records directly to the patient
Some institutions reported they would only send the records to another medical professional.

Will you accept a patient’s access requests by email or by fax?
Some institutions required the patient to come in person or to mail a request.

Will you send the records to a patient by email?
Some institutions refused to send electronic records by e-mail.

Do you charge patients for these records – and if so, how much?
Some institutions shared a fee amount; some refused to answer. We analyzed the information as follows:

Per OCR guidance on the Right of Access:

  • We considered an institution to be charging “reasonable fees” if they:
    • did not charge patients,
    • charged a flat fee of $6.50 or less, or reported fees that seemed to be based on reasonable labor costs for copying.
  • We considered an institution to be charging “unreasonable fees” if they:
    • charged per page fees, including fees for records retrieval, or charged a flat fee higher than $6.50.
  • Institutions who did not answer this question are reported as NA (not applicable).

All of the above questions touch on four key aspects of a patient's Right of Access under the HIPAA Privacy Rule. These include the right to:

  1. receive records directly;
  2. submit a request in ways that do not cause unreasonable delay or impose undue burden on the patient;
  3. receive records in the form and format requested, including receiving electronic records by e-mail and;
  4. have all fees for these records be reasonable (reasonable, cost-based fees for the labor needed to make the copy).

Because this survey is based on questions about an institution’s process for releasing records to patients, we were not able to determine whether an institution would release records to patients within 30 days of receiving the request, which is another key aspect of the HIPAA Right of Access.