2017 Arizona Revised Statutes
Title 36 - Public Health and Safety
§ 36-3802 Individual rights
36-3802. Individual rights
A. A health information organization must provide the following rights to individuals:
1. To opt out of participating in the health information organization pursuant to section 36-3803.
2. To request a copy of the individual's individually identifiable health information that is available through the health information organization. The health information organization may provide this right directly or may require health care providers participating in the health information organization to provide access to individuals. The copy may be provided electronically, if the individual requesting the copy consents to electronic delivery of the individually identifiable health information, and must be provided to the individual within thirty days after the individual's request. Charges for copies are governed by section 12-2295.
3. To request amendment of incorrect individually identifiable health information available through the health information organization.
4. To request a list of the persons who have accessed the individual's individually identifiable health information through the health information organization for a period of at least three years before the individual's request. This list must be provided to the individual within thirty days after the individual's request.
5. To be notified, pursuant to section 18-545 and 45 Code of Federal Regulations part 164, subpart D, of a breach at the health information organization that affects the individual's individually identifiable health information.
B. If an individual does not have the capacity to make health care decisions, the individual's health care decision maker may exercise all individual rights in this chapter on behalf of the individual.
