Skip to Content

Individual Rights, A.R.S. § 36-3802

Link to the law
This will open in a new window

“Individual rights”
Health information organizations (HIOs) must provide individuals with the right to opt out of participating in the HIO. Individuals have the right to request access to their information and to request that an HIO fix any errors in this information.
HIOs must provide individuals with a list of the persons that have accessed an individual’s information during the prior three years. HIOs must provide this information within 30 days of receiving the individual’s request.
HIOs must comply with the HIPAA breach notification requirements upon discovering a breach that affects individually identifiable health information.