Utah Code Ann. § 78B-5-618

Patient access to medical records - Third party access to medical records

If a health care provider is considered a covered entity under HIPAA, a patient or personal representative may inspect or receive a copy of the patient's record from that provider in accordance with 45 C.F.R. Parts 160 and 164. If a health care provider is not considered a covered entity under HIPAA, a patient or personal representative may inspect or receive a copy of the patient's records unless access to the records is restricted by law or judicial order. 

Any health care provider who provides a copy of a patient's records must comply with the deadlines required by HIPAA (45 C.F.R. 164.524(b)), and may charge a reasonable cost-based fee that only includes the cost of copying (including supplies for and labor of copying), and postage (when the patient or representative requested that the copy be mailed). 

Any health care provider or other person authorized to provide records who provides a copy of a patient's records to an authorized third party must provide a copy within 30 days after receipt of notice and may charge a reasonable fee to cover the provider's costs of up to $20 per request for locating the records, copying charges up to $0.50 per page for pages 1-40 and up to $0.30 per page for pages 41 and above, the cost of postage (when the third party requested that the copy be mailed), and any sales tax owed.