Giving patients easy electronic access to their health information can engage patients, improve health outcomes, and increase the efficiency of your practice, saving money. Below, find resources on patients’ rights to access their health information, privacy and security protections for patient information under HIPAA, federal payment incentive programs for using electronic health records (EHRs), and implementing technology solutions that ensure convenient, secure access for individuals.
Patient Access Resources for Providers
Use these training tools and technical guidance resources to optimize the use of EHRs in your practice or clinic.
What is an API?
Adding application programming interfaces (APIs) to your EHR allows you to easily share health information with your patients through applications they choose. Learn how with this interactive educational tool.
These recommendations will help enable consumers to leverage API technology to access patient data, while ensuring the appropriate level of privacy and security protection for the data in the EHR.
Improving the Health Records Request Process for Patients
Patients and caregivers still face challenges in accessing their health records. This report, based on research with real people, can help you improve the health record request process for patients.
Access Right, Health Apps, and API FAQs
Find answers to frequently asked questions about Health IT and HIPAA from the HHS Office for Civil Rights.
Your EHR needs to capture information for a common set of data classes so it can support effective exchange of health information with patients and other providers. Learn more about ONC’s Draft U.S. Core Data for Interoperability (USCDI).
A model privacy notice (MPN) is like a nutrition label for web applications, displaying a company’s privacy practices in a clear, transparent way to help patients make informed decisions when selecting health applications and products that would use or store their health information.
This guide explains the key considerations for implementing and managing APIs in health care with privacy and security of health information in mind.