A Model Script to Help Avoid HIPAA Right of Access Violations

The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) is targeting providers that don’t respond to patient requests for access to their own protected health information (PHI) in accordance with HIPAA Privacy Rule requirements. One effective way to ensure compliance is to prepare frontline staff to answer questions that patients seeking access to their PHI are likely to ask. Here’s a script setting out FAQs on patient access that you can include as part of your HIPAA training and education.