Please consider making a donation to keep this project's resources available at no cost to the public. Your donation will support new research, updates to current resources, and website maintenance for HealthInfoLaw.org.
Individual Rights, A.R.S. § 36-3802
Link to the law
This will open in a new window
This will open in a new window
“Individual rights”
Health information organizations (HIOs) must provide individuals with the right to opt out of participating in the HIO. Individuals have the right to request access to their information and to request that an HIO fix any errors in this information.
HIOs must provide individuals with a list of the persons that have accessed an individual’s information during the prior three years. HIOs must provide this information within 30 days of receiving the individual’s request.
HIOs must comply with the HIPAA breach notification requirements upon discovering a breach that affects individually identifiable health information.
.png)