HIPAA Glossary · Privacy Rule concepts
Right of access
The individual's right to inspect and obtain a copy of their PHI in the designated record set, generally within 30 days and at limited cost.
Context
The subject of OCR's sustained Right of Access Initiative — 56 enforcement actions and counting. §164.524 sets the 30-day clock, the single 30-day extension, the format honouring rules, and the cost-based fee limits. See [the Right of Access post](/blog/hipaa-right-of-access/) for the current enforcement pattern and a request-handling process.
Related terms
- Designated record set — The group of records a covered entity uses to make decisions about individuals — medical and billing records, claims and case management files.
- Amendment — The individual's right to request correction of their records, with a process for acceptance or documented denial.
- NPP — The document telling individuals how their PHI may be used and what rights they hold.
Where this fits
This is one of 50+ terms in the HIPAA Glossary. For how HIPAA is structured end-to-end, see the Security Rule guide and the Privacy Rule guide.