What governs patient access rights to medical records in Massachusetts?

• A. Only HIPAA
• B. State law
• C. HIPAA and state law
• D. Hospital policy

Answer: (C)

Access rights to medical records are determined by both federal and state rules. HIPAA sets the baseline: individuals have the right to access their protected health information held by covered entities, with specific standards for what can be accessed, in what format, and how fees may be charged. Massachusetts law works alongside HIPAA, adding state-specific provisions that can broaden rights, refine procedures, or impose additional protections. In practice, a provider must follow both sets of rules, and a policy that contradicts either would not be valid. The combination of HIPAA and Massachusetts law is why patient access rights are guided by both.