HIPAA Privacy Rule 164.524: Right of access to inspect and obtain a copy of PHI

A covered entity must provide an individual, on request, access to inspect and obtain a copy of PHI in a designated record set, in the form and format requested if readily producible, within 30 days (one 30-day extension permitted with notice), for a reasonable, cost-based fee, with a limited set of grounds for denial and, where applicable, a right to review of certain denials, per 164.524.