Patient Access to Medical Records: Who, What and When

This webinar is Part 1 of 4 in the “I Heart HIPAA” webinar series.

Following an enforcement initiative that has resulted in over 50 enforcement actions involving covered entities and business associates, the patient right of access under the HIPAA Privacy Rule is again in the spotlight.

In December 2025, the U.S. Department of Health and Human Services (HHS) announced an investigation into a complaint involving vaccination of a student without parental consent. In connection with that announcement, the Office for Civil Rights (OCR) issued a Dear Colleague letter reminding HIPAA-regulated entities of their obligation to provide timely access, including when a parent requests access to their minor child’s record (unless an exception applies). HRSA announced a new grant requirement related to parental consent that began appearing in January 2026.

Learning Objectives:

• Identify patient access rights under federal law, including the HIPAA Privacy Rule and the Information Blocking Rule
• Explain when a health care provider must provide access to a patient and when they have discretion to deny or limit access
• Clarify how state and federal laws affect whether parents have access to the records of minor patients

Audience:

• CMOs
• COOs
• Compliance Officers
• Risk Managers
• Clinical Leadership
• HIPAA Privacy Officers
• HIPAA Security Officers

Presenter:

• Dianne Pledgie