A patient has the right to:

• Consent or refuse the collection, use & disclosure of their personal health information (PHI). Refusal is subject to legal exceptions, such as a warrant or a subpoena.
• Access their PHI at any time.
• Request changes to information they feel is inaccurate.
• Know who accesses and uses their PHI. The patient may request an audit.
• Know to whom their PHI has been disclosed.
• Challenge the hospital’s compliance with Privacy laws.