Even though I’m a nurse, I did not know that the MR department MUST keep a record of every time my records have been requested.
If/when the risk manager calls me back on Monday, I’m going to ask for that list.
The first link is a bunch of gobbily gook, but it is the part of the law that states you are entitled to an “accounting” of disclosures that the “covered entity” (ie Hospital).
The second link is to the Wikipedia article that this info was found in. It is under the Privacy Rule section.
http://en.wikipedia.org/wiki/Health_Insurance_Portability_and_Accountability_Act#cite_note-18