HIPAA Privacy Rule 164.528: Right to an accounting of disclosures

A covered entity must provide an individual, on request, an accounting of certain disclosures of PHI made in the six years before the request (excluding TPO, to the individual, authorized, directory and other 164.528(a)(1) excepted disclosures), within 60 days (one 30-day extension permitted with notice), with the first accounting in any 12-month period free of charge.

Maintained by Gerard Blokdyk

Other controls in Individual rights (164.522, 164.524, 164.526, 164.528) – HIPAA Privacy Rule

164.522a Right to request restriction of uses and disclosures
164.522b Right to request confidential communications
164.524 Right of access to inspect and obtain a copy of PHI
164.526 Right to request amendment of PHI

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All HIPAA Privacy Rule controls