General Surgery Coding Alert

Reader Question:

Don’t Tread on HIPAA Right of Access

Question: We have a patient with a large balance who has not responded to requests for payment. They sent a request asking for a copy of their health records. Can I withhold the records until the patient pays for the services we’ve already provided?

Codify Subscriber

Answer: No, you cannot withhold protected health information (PHI) for reasons of non-payment, according to the Department of Health and Human Services (HHS).

“A covered entity may charge an individual that has requested a copy of her PHI a reasonable, cost-based fee for the copy. See 45 CFR 164.524(c)(4). However, a covered entity may not withhold or deny an individual access to her PHI on the grounds that the individual has not paid the bill for health care services the covered entity provided to the individual,” HHS says on its website.

Caution: Since the HHS Office for Civil Rights (OCR) instituted its HIPAA Right of Access Initiative in September 2019, the agency has investigated and settled 38 cases, including monetary penalties for the providers.

Ensuring that patients have swift and affordable access to their medical records — no matter their financial situation — is a part of HIPAA and remains a primary focus of the Feds. You may want to include Right of Access protocols in your compliance planning and offer training to staff to protect these critical rights.