What is the process for addressing a client’s request to view their records in PA?

• A. Deny access to all records to protect clinician privacy.
• B. Provide access or copies in accordance with client rights under HIPAA and state law; respond within specified timelines.
• C. Release records only after court order.
• D. Provide full raw data without restrictions.

Answer: (B)

Clients have a right to view and obtain copies of their records, and clinicians must respond in line with HIPAA and Pennsylvania law. When a request comes in, the provider should verify the client’s identity, locate the records, and offer access or provide copies in the form requested (electronic or paper) unless a legal exception applies. The patient’s records should be provided within the allowed timeframe—typically 30 days, with the possibility of a single 30-day extension if needed—and the charge, if any, must be reasonable and permitted by law. Psychotherapy notes are a common example of information that may be excluded from the patient’s access, but the rest of the PHI generally must be furnished. Denying access entirely, waiting for a court order, or releasing unrestricted raw data would not align with the patient’s rights under these laws.