Can a patient request a list of all disclosures of their PHI?
Yes. It is our understanding that individuals have the right to request a list of the organizations and individuals to which their PHI has been disclosed. This excludes any requests that have been authorized directly by the individual and are for TPO. You can read more about this at http://www.hhs.gov/ocr/regtext.html, Section 164.5.