Test your knowledge of the process to fulfill a request under the HIPAA Individual Right of Access: Can a covered entity send PHI by unencrypted email (e.g., Gmail, Outlook) if the patient requests? Yes, if the individual is provided a brief warning about the security risks NoIf the PHI being requested is maintained electronically, is the covered entity required to be able to provide an electronic copy? Yes NoCan a covered entity provide a summary of the PHI requested in lieu of providing access to the PHI? Yes, if the individual agrees to the summary and any corresponding fees No, summaries are not an acceptable substitute
