1. IntroductionToday, you have more reasons than ever to worry about the privacy of your medical information. This information was once stored in locked filing cabinets and on dusty shelves in the medical records department. Your doctor(s) used to be the sole custodians of your information about your physical and mental health. With today's use of electronic medical records software, information discussed confidentially with your doctor(s) will be recorded in electronic data files. The obvious concern is the possibility of your records being seen by hundreds of strangers working in healthcare, the insurance industry, and a multitude of businesses associated with medical organizations. Fortunately, this catastrophic scenario will likely be avoided. concerned with the confidentiality and security of personal health data, and adopted the “Health Insurance Portability and Accountability Act” (HIPAA) in 1996. HIPAA sets the national standard for electronic health data transfers. Before HIPAA, each state set its own standards. Now, states must meet the minimum standards set by HIPAA. States may enact laws to incorporate and/or enhance the fundamental rights granted by HIPAA. How the HIPAA Privacy Rule Protects YOU; The Patient Access to Your Own Medical Records Before HIPAA, access to YOUR medical records was not guaranteed by federal law. Only about half of states had laws giving patients the right to view and copy their own medical records. You may be charged for copies, but HIPAA sets fee limits. You should now be aware of the privacy practices. How your medical information is used and disclosed must now be communicated to you. The notice should also tell you how to exercise your rights and how to file a complaint with your health care provider and the DHHS Office for Civil Rights. HIPAA requires accounting of disclosure details. You have the right to know who accessed your health records for the past six years. There are, however, several exceptions to the accounting requirement. Accounting is not required when records are disclosed to people who view your records for processing, payment, and health care operations. These individuals do not need to be listed in the disclosure log. Filing a Complaint If you believe that a health care provider or health plan has violated your privacy, you have the right to file a complaint with your health care provider and with DHHS. Special Privacy Requests Communications. You can make special requests specifying how you want your doctor's office to handle confidential communications..