OCR’s Right of Access Initiative has settled 56 cases to date; most involved small practices and the finding was the same every time: a late or ignored patient request. Patient Rights is the workflow that keeps that case off your docket.
What it does
- Intake, verification, routing, and the 30-day clock for access, amendment, accounting, and restriction requests.
- Fee calculator aligned with §164.524(c)(4) and OCR’s 2016 fee guidance.
- Format honouring: paper, electronic, or portable media per the patient’s choice.
- Dated audit trail of every step, from receipt to delivery, for OCR response.
How it maps to HIPAA
Patient Rights directly implements §164.524 (access), §164.526 (amendment), §164.528 (accounting of disclosures), and §164.522 (requested restrictions and confidential communications). The 30-day clock, extensions, and fee limits are built in, not advisory.
Where it fits
Patient Rights is a focused capability inside the Privacy module, sharing policy and NPP state with Privacy Rule Operations.