Patient Access to Data in Healthix

Important News for Patients and Consumers: Patient Access to Data in Healthix

New regulations under the 21st Century Cures Act, which became effective in April 2021, seek to improve patient access to their own medical information.

Patient Direct Access

Medical Records

Patients can now contact Healthix to request copies of their medical records. To submit a request, please complete the Health Patient Medical Record Report Request Form and send via secure fax to 1(877) 331-1729 or mail the form to: Healthix, Attn: Compliance Office, 551 North Country Road, St. James, NY 11780.

Audit Logs/Consent Values

Patients can also request an accounting of disclosures to review access to their data through Healthix within specific time period not exceeding six (6) years from the date of the request and what consent values have been submitted to Healthix from different participants (healthcare providers) on behalf of the patient. To submit a request, please complete the Healthix Audit Log/Consent Value Request Form and send via secure fax to 1(877) 331-1729 or mail the form to: Healthix, Attn: Compliance Office, 551 North Country Road, St. James, NY 11780.

Please note that requests for records of minor patients, age 10-17, are subject to internal review and may require minor’s consent for release to a parent or legal guardian.

Depending on the amount of data and the delivery method (electronic or paper), the response time may vary. Healthix will make every effort to respond to these requests in a timely and efficient manner.

Patients who choose to receive their requested information electronically, via encrypted e-mail, will not incur any charges. Requests for paper copies of medical records are subject to $0.75 charge per page, plus shipping. Invoice amount will be calculated, and payment will be required in advance. We encourage you to opt for electronic delivery as patient record data can often exceed 100 pages.

It is also important to note the following: Records held by Healthix do not represent a full clinical record.  For a copy of your full clinical record, we recommend that you contact your clinical care provider(s) directly. The types of data submitted to Healthix from all participating providers can be viewed on our website (healthix.org/directory).

Patient Directed 3rd-Party Applications (Commonly known as “Apps” or “APIs”)

Sharing data with third-party applications, such as a patient portal, provide innovative ways for patients and providers to manage health and wellness and leverage an individuals’ identifiable health data.  As the third-party application space continues to expand, and data sharing becomes more prevalent, it is critical that such data sharing be done in a responsible, secure manner and in accordance with applicable privacy and security standards.

We encourage you to carefully review the App “User Agreement” before authorizing any transfer of health data from Healthix to the App company.

Consumers/Patients are often not familiar of the extent to which their health data is de-identified, sold, and otherwise reused without their consent. App developers inform Consumers of  the future use of their personal data by the application in the User Agreements, however these are not always easily interpreted. We encourage all consumers to review these documents before authorizing exchange of their Protected health Information via any 3rd party application.

The Healthix Privacy and Security Teams are working to ensure, to the fullest extent possible, that the 3rd Party Apps that we connect with provide evidence of robust identity proofing of the requestor, and secure channel transfer of the data to the App. However, any further use or release of data is governed by the App User Agreement and may no longer be protected under federal privacy law (HIPAA).