Which statement best describes access to imaging records under privacy and legal standards?

• A. Provide access to imaging records immediately without verification.
• B. Destroy imaging records to avoid disputes.
• C. Provide access to the patient or authorized individuals with secure handling and privacy protection.
• D. Provide only redacted summaries to avoid identifying information.

Answer: (C)

Access to imaging records must protect patient privacy while honoring the patient’s rights to their own information. The correct approach is to provide access to the patient or to an individually authorized to act on the patient’s behalf, and to do so using secure handling that guards privacy. This means verifying the requester’s identity or authority, using secure channels (like a protected patient portal or encrypted transfer), and ensuring safeguards to prevent disclosure to unauthorized individuals.

This is the best answer because laws such as HIPAA and relevant state regulations require that patients and their authorized representatives can inspect or obtain copies of medical records, including imaging, while enforcing privacy protections. Providing immediate access without verification would risk disclosure to the wrong person; destroying records is illegal and defeats the patient’s rights; giving only redacted summaries fails to meet the patient’s right to full access, which may be required unless there is a specific, legally justified reason to redact.