Executive summary. An amendment request asks to add or correct information through a defined review process, with the record history preserved.
Definition
The HIPAA right to request amendment allows an individual to ask a covered entity to amend protected health information or a record about the individual in a designated record set.
Understand the requested change
Record the specific information the individual believes is incomplete or incorrect, and the reason they gave. Send it to a reviewer with the right record context and authority.
Keep the request and any supporting materials attached to the relevant record. The decision then stays understandable after staff change.
Document the decision
If the amendment is accepted, follow the organization’s record process so the amendment links to the original information. If it is denied, provide the required written explanation and, where applicable, the opportunity for a statement of disagreement.
Treat an amendment request as a privacy-rights workflow with a defined timeline, and log it that way from intake.
Frequently asked questions
Does an amendment erase the original record?
An amendment process should preserve an understandable record history. The specific handling depends on the record type and the organization’s policies.
Referenced standards and further reading
- HHS OCR: Individuals’ Right to Request Amendment ↗U.S. Department of Health and Human Services
Related articles
HIPAA Security Rule risk analysis: scope, evidence, decisions →
The minimum necessary standard in operational design →
Business associate relationships: map the work, not the logo →