Patient Access to Medical Records: Who, What and When
On-demand Originally aired February 10, 2026
January 21, 2026 at 1:00 pm (EDT)
Webinar Information
This webinar is Part 1 of 4 in the “I Heart HIPAA” webinar series.
Overview
Learning Objectives
Audience
Instructor
Format
Patient Access to Medical Records: Who, What and When
Following an enforcement initiative that has resulted in over 50 enforcement actions involving covered entities and business associates, the patient right of access under the HIPAA Privacy Rule is again in the spotlight.
In December 2025, the U.S. Department of Health and Human Services (HHS) announced an investigation into a complaint involving vaccination of a student without parental consent. In connection with that announcement, the Office for Civil Rights (OCR) issued a Dear Colleague letter reminding HIPAA-regulated entities of their obligation to provide timely access, including when a parent requests access to their minor child’s record (unless an exception applies). HRSA announced a new grant requirement related to parental consent that began appearing in January 2026.
This webinar is especially relevant considering these recent announcements. The presentation will help HIPAA covered entities, including community health centers, to understand when and how patients may request their medical records and review the options for responding to such requests. This presentation will also cover when personal representatives, such as parents and guardians, may request a minor child’s medical records.
CMOs
COOs
Compliance Officers
Risk Managers
Clinical Leadership
HIPAA Privacy Officers
HIPAA Security Officers
This session will:
Identify patient access rights under federal law, including the HIPAA Privacy Rule and the Information Blocking Rule
Explain when a health care provider must provide access to a patient and when they have discretion to deny or limit access
Clarify how state and federal laws affect whether parents have access to the records of minor patients
Dianne Pledgie
Principal
Dianne advises health care and non-profit organizations on the development and implementation of robust compliance programs.
Dianne also provides legal guidance on privacy, security and confidentiality matters, with particular focus on Health Insurance Portability and Accountability Act (HIPAA), 42 C.F.R. Part 2 and the Information Blocking Rule, including:
Advising clients on their obligations to protect patient records, respond to patient requests, and develop policies and procedures;
Reviewing business associate agreements, data use agreements, and patient consents related to the use and disclosure of protected health information and sensitive information; and
