25% off all training courses Offer ends May 29, 2026
View HIPAA Courses
25% off all training courses
View HIPAA Courses
Offer ends May 29, 2026

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

ONC Releases Videos Explaining Patients’ HIPAA Rights

Earlier this year, the HHS’ Office for Civil Right (OCR) released guidance for healthcare organizations on patients’ HIPAA rights in an attempt to clear up confusion over access and ensure that covered entities were aware of their obligations under the HIPAA Privacy Rule.

The guidance covered many of the questions commonly asked by healthcare organizations, including the models that can be adopted by healthcare organizations for charging for PHI copies.

Now that covered entities are prepared, efforts have shifted to advising patients of their access rights under HIPAA. This week, the Office of the National Coordinator for Health Information Technology (ONC) -in conjunction with the OCR – released a series of educational videos to improve understanding of patients’ HIPAA rights.

The ONC wants to improve patient engagement and get patients to take greater interest in their health. Encouraging patients to obtain copies of their ePHI can help in this regard. Having access to medical records allows patients to check for errors, provide their data to other healthcare providers or research institutions, and use the information in third party applications.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

Patients’ HIPAA Rights Clearly Explained

The videos explain patients HIPAA rights to access their health data, the fees that can be charged for providing ePHI copies, the timescale healthcare providers are allowed for providing copies, and HIPAA access and third parties.

According to Lucia Savage, J.D., ONC’s chief privacy officer, “Many people are not fully aware of their right to access their own medical records under the Health Insurance Portability and Accountability Act (HIPAA), including the right to access a copy when their health information is stored electronically.” She goes on to say, “The videos we released today highlight the basics for individuals to get access to their electronic health information and direct it where they wish, including to third party applications.”

Alongside the videos, the ONC also released a useful infographic to explain the basics of patients’ HIPAA rights.

patients' HIPAA rights infographic

 

ONC Launches the Patient Engagement Playbook

The ONC has also created a new resource for healthcare organizations explaining the importance of providing patients with access to their health records and why this should be encouraged.

The new resource – called The Patient Engagement Playbook – was launched on the final day of ONC Annual Meeting in Washington, and is intended to be an evolving resource for all healthcare professionals covering best practices to adopt and tips to leverage health IT and set up EHR patient portals.

The playbook contains useful information to help healthcare organizations improve portal adoption, meet patients’ needs online and ease the burden on office staff, and Integrate patient-generated health data with a view to improving clinical decision making and the provision of care.

There are many benefits to be gained from implementing EHR patient portals, although to get the full advantages it is essential that EHR patient portals are well thought out and are carefully configured. The playbook should help in this regard.

The director of ONC’s Office of Programs, Sherilyn Pruitt, requested feedback on the playbook which will help to ensure that it can be developed to be an invaluable resource for healthcare professionals. “We hope that stakeholders — including patients, patient advocates, providers and others — share their input, feedback, and additional use cases that could be added to the Playbook in the future.”

Author: Steve Alder is the editor-in-chief of The HIPAA Journal. Steve is responsible for editorial policy regarding the topics covered in The HIPAA Journal. He is a specialist on healthcare industry legal and regulatory affairs, and has 10 years of experience writing about HIPAA and other related legal topics. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. Steve shapes the editorial policy of The HIPAA Journal, ensuring its comprehensive coverage of critical topics. Steve Alder is considered an authority in the healthcare industry on HIPAA. The HIPAA Journal has evolved into the leading independent authority on HIPAA under Steve’s editorial leadership. Steve manages a team of writers and is responsible for the factual and legal accuracy of all content published on The HIPAA Journal. Steve holds a Bachelor’s of Science degree from the University of Liverpool. You can connect with Steve via LinkedIn or email via stevealder(at)hipaajournal.com

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist