HIPAA Glossary · Data & information types
Designated record set
The group of records a covered entity uses to make decisions about individuals — medical and billing records, claims and case management files.
Context
Defined at §164.501. The designated record set defines the scope of the patient's rights of access and amendment under the Privacy Rule. It is often broader than the EHR — if a record is used to make decisions about the individual, it is in scope, including analytics outputs that drive clinical workflow decisions.
Related terms
- Right of access — The individual's right to inspect and obtain a copy of their PHI in the designated record set, generally within 30 days and at limited cost.
- Amendment — The individual's right to request correction of their records, with a process for acceptance or documented denial.
- PHI — Protected health information — individually identifiable health information held or transmitted by a covered entity or business associate, in any form.
Where this fits
This is one of 50+ terms in the HIPAA Glossary. For how HIPAA is structured end-to-end, see the Security Rule guide and the Privacy Rule guide.