How should patients exercise their right to access medical records, and what timelines apply?

• A. Submit a written request; covered entities must respond within a specified timeline (often 30 days); fees may apply in some cases.
• B. Ask verbally and receive records the same day.
• C. Records are automatically provided to patients without any request.
• D. Access is only allowed through a court order.

Answer: (D)

Patients exercise their right to access medical records by submitting a written request to the covered entity that holds the records. The request should identify which records are sought and, if possible, specify the preferred format for delivery (electronic or paper). The entity must respond within 30 days of receiving the request, and can extend up to 60 days total with a written explanation if the request is complex or involves records from multiple locations. Fees for copying, postage, and related labor may apply, but must be reasonable and disclosed before fulfilling the request. Access is not automatic and does not require a court order in routine situations; a court order would only come into play in specific legal or restrictive contexts. When feasible, the records should be provided in the format requested by the patient; if that exact format isn’t readily available, an equivalent format that is readily producible should be offered.