SIDEBAR:

Many institutions with fully computerized record systems will have accounting records that exceed the HIPAA requirement. Modern computer systems routinely track every use and disclosure of a medical record. HIPAA does not require a covered entity to give you all the accounting records that the entity has. That's unfortunate. It doesn't mean that you can't ask for non-HIPAA required accounting records if they exist. We suggest that you make a broad request. If you are dealing with a federal or state institution, you might be able to use other privacy or freedom of information laws to seek records about you that may not be available under HIPAA. If the records are important to you, ask first for all the records. Even if there is no right, an institution may still be willing to share the accounting records, if only because it is cheaper and easier to do so than to separate the required from the non-required parts of the accounting. If you ask for more, you might just get what you want. If asking doesn't get you what you need, use other laws and procedures if they are available.