Where are permanent medical records kept?
Ubernostrum; you are right that HIPAA makes it easier for patients to get theirown records; you are also right that it establishes more severe (and uniform) penalties than existed before for inapproriate disclosure of medical information. However, this is what the Dept. of Health and human services says about consent, with relevant parts highlighted: Consent. A covered entity may voluntarily choose, but is not required, to obtain the individual’s consent for it to use and disclose information about him or her for treatment, payment, and health care operations. A covered entity that chooses to have a consent process has complete discretion under the Privacy Rule to design a process that works best for its business and consumers. A “consent” document is not a valid permission to use or disclose protected health information for a purpose that requires an “authorization” under the Privacy Rule (see 45 CFR 164.508), or where other requirements or conditions exist under the Rule for the use
