30 Day requirement under HIPAA
I’m a patient at a large health system. I requested an Accounting of Disclosures to see if certain providers had accessed my chart. I was told they only give external disclosures, not internal workforce access. When I asked for access logs, I was told they don’t provide them ‘as a matter of policy.’ When I asked specifically about a couple of providers with a new accounting of disclosures form, the system didn’t respond within 30 days or issue an extension.
For those who work in HIM/compliance: is this typical? How big a deal is it to miss the 30-day requirement under HIPAA?
Posted Sep 3, 2025, 5:08 PM UTC
210