Actually, unless you're referring to the accounting of PHI disclosures as outlined in Section 164.528 of the HIPAA Privacy Rule, covered entities are permitted to charge reasonable, cost-based copying fees to individuals seeking to obtain a copy of their medical record under their right of access provided by the Privacy Rule. This is outlined in Section 164.524(c)(4). If charged to anyone else, I'm not a lawyer so I can't provide legal advice, but I'm guessing that would be mandated by other state legislation or would simply boil down to being an individual business decision made by your organization. Given the impact this could have on your organization, please obtain outside legal and/or consulting expertise to confirm this.
For more information on this topic, visit these other SearchSecurity.com resources:
News & Analysis: Final HIPAA privacy changes announced
Ask the Expert: Resources for building a HIPAA knowledge base
Best Web Links: Securing health care/health services
Dig Deeper on HIPAA
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.