HIPAA provides patients with several rights, all described in our Notice of Privacy Practices. The HIPAA Privacy Office works with our clinical departments, physicians, and Health Information Release Services to faciliate requests related to your rights under HIPAA. These rights include:
- The right to request a copy of your medical records from Washington University Physicians for yourself or for us to send a copy of your records to a third party, such as another physician.
- The right to request an amendment to your medical record(s) if you find we have documented something in error. These requests are reviewed by the HIPAA Privacy Office and the treating provider.
- The right to request a restriction on an internal use or external disclosure of your Protected Health Information.
- The right to request confidential communications of your Protected Health Information.
- The right to request a restriction on disclosures of your health information to your health plan (*applicable only for those services where insurance is not billed; patient pays in full out of pocket at the time of visit)
Frequently Asked Questions
I thought HIPAA required you to get my permission for every use and disclosure of my health information. Don’t you need my permission to talk to other doctors?
While HIPAA regulates all uses and disclosures of your health information, it also allows for many uses and disclosure of your health information to occur without your authorization. HIPAA specifically allows covered entities, like Washington University, to share your health information with other physicians or providers who may be taking care of you and with your health insurance plan for payment purposes. HIPAA allow us to use your health information without your authorization to carry out certain administrative, financial, legal and quality improvement activities that are necessary to run our business and support our treatment activities. Our Notice of Privacy Practices explains how Washington University may use and disclosure your health information with your written consent or authorization in detail.
How do I get a copy of my medical records?
You may request a copy of your outpatient medical record from the Washington University Health Information Release Service. A copy of the request form can be downloaded on this site.
If you need a copy of hospital records, you will need to request those directly from the hospital.
What if I find something in my medical record that is wrong or that I disagree with?
You have the right to request that information in your medical record be amended or supplemented with clarifying information and added in the form of an addendum to your medical record. The HIPAA Privacy Office will review your request with the author of the subject PHI prior to making a determination of the request for amendment and will review and act on your request no later than 60 days upon receipt of your written request. You can find information on Amendment Requests on our Patient’s Rights and Related Forms page.