Under the HIPAA Privacy Rule, patients have which rights?

• A. The right to sell their data.
• B. The right to refuse all medical care.
• C. The right to access and amend their health information.
• D. The right to change physician.

Answer: (C)

Under the HIPAA Privacy Rule, individuals have specific rights over their health information. The most relevant right here is that patients can access their health information and request amendments to it if they believe it is inaccurate or incomplete. This means they can inspect or obtain copies of their medical records from covered entities like health care providers and insurers, and they can ask for corrections to any health information in those records. Covered entities must respond within the rule’s timelines and handle amendment requests appropriately, with certain exceptions and potential extensions. This set of rights helps ensure that a patient can review what is in their file and keep it accurate for treatment, billing, and legal purposes. The other options aren’t built into the HIPAA Privacy Rule: it does not grant a right to sell data without authorization, it does not grant a blanket right to refuse all care, and it does not give a right to change physicians.