A patient has the right to:
- Consent or refuse the collection, use & disclosure of their personal health information (PHI). Refusal is subject to legal exceptions, such as a warrant or a subpoena.
- Access their PHI at any time.
- Request changes to information they feel is inaccurate.
- Know who accesses and uses their PHI. The patient may request an audit.
- Know to whom their PHI has been disclosed.
- Challenge the hospital's compliance with Privacy laws.