30 Day requirement under HIPAA

I’m a patient at a large health system. I requested an Accounting of Disclosures to see if certain providers had accessed my chart. I was told they only give external disclosures, not internal workforce access. When I asked for access logs, I was told they don’t provide them ‘as a matter of policy.’ When I asked specifically about a couple of providers with a new accounting of disclosures form, the system didn’t respond within 30 days or issue an extension.

For those who work in HIM/compliance: is this typical? How big a deal is it to miss the 30-day requirement under HIPAA?

Posted Sep 3, 2025, 5:08 PM UTC

210
Loading comments…