Under HIPAA, what rights do patients have regarding their own medical records?

The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule, in effect since 2003, gives patients broad rights over their protected health information. You have the right to see and get a copy of your medical records (providers can charge a reasonable fee but must respond within 30 days), request amendments if information is inaccurate or incomplete, receive a notice of privacy practices, and request restrictions on how your information is used or shared. Covered entities include doctors, hospitals, health plans, and their business associates. HIPAA complaints are filed with the HHS Office for Civil Rights, and violations can result in civil and criminal penalties.