HIPAA Glossary · Privacy Rule concepts
Amendment
The individual's right to request correction of their records, with a process for acceptance or documented denial.
Context
Required by §164.526. The entity must act within 60 days (one 30-day extension allowed), accept or deny the request in writing, and include an individual's statement of disagreement with any contested record if the entity declines to amend. Amendments do not always mean deletion — appended corrections are a common and acceptable form.
Related terms
- Right of access — The individual's right to inspect and obtain a copy of their PHI in the designated record set, generally within 30 days and at limited cost.
- Designated record set — The group of records a covered entity uses to make decisions about individuals — medical and billing records, claims and case management files.
Where this fits
This is one of 50+ terms in the HIPAA Glossary. For how HIPAA is structured end-to-end, see the Security Rule guide and the Privacy Rule guide.