skip to Main Content

Test your knowledge of the process to fulfill a request under the HIPAA Individual Right of Access:

Can a covered entity send PHI by unencrypted email (e.g., Gmail, Outlook) if the patient requests?
If the PHI being requested is maintained electronically, is the covered entity required to be able to provide an electronic copy?
Can a covered entity provide a summary of the PHI requested in lieu of providing access to the PHI?

Back To Top