Oregon Salivary Gland Ultrasound Records: Privacy Laws and Patient Rights

Kevin Henry

Data Privacy

Published Updated

9 minutes read
Share this article
Oregon Salivary Gland Ultrasound Records: Privacy Laws and Patient Rights

Your Oregon salivary gland ultrasound records may include the radiologist’s report, ultrasound images, the order for the scan, and related clinical notes. Oregon law and HIPAA provide rights to request records, understand when they may be shared, and seek corrections. The rules and fees can depend on which provider holds the information.

What Oregon salivary gland ultrasound records can patients access?

You can generally ask to inspect or receive copies of health information about you that a covered provider maintains in its designated record set. For a salivary gland ultrasound, specify whether you want the written report, the images, or both. You may also request related records, such as the imaging order or notes about the examination, if the provider maintains them.

These records are HIPAA protected health information (PHI). HIPAA generally gives you a right to access your medical records and other information maintained by or for a covered provider, with limited exceptions. Oregon’s rule for Oregon Medical Board licensees also allows patients to request all or part of the record and says a summary cannot replace the actual record unless the patient agrees. See the HHS explanation of the HIPAA right of access and Oregon Administrative Rule 847-012-0000.

Some information may fall within a specific legal exception, such as separately maintained psychotherapy notes or certain material prepared for legal proceedings. A provider should not treat an ordinary ultrasound report or image as automatically exempt simply because it is part of a medical record.

How do patients request ultrasound records in Oregon?

Contact the clinic, hospital, imaging center, or other healthcare provider that performed the ultrasound or maintains the record. Ask for its medical-records or health-information-management department, and submit the provider’s request form if it has one. In your request, identify yourself, give the approximate date of the ultrasound, state which records you want, and specify whether you prefer a paper or electronic copy.

A clear request could say: “Please provide my salivary gland ultrasound report and the associated images from [date]. I would like them in electronic format, if available.” Keep a copy of your request and note when and how you sent it. For Oregon patient medical record access, a written request is a practical way to document what you asked for.

You generally do not need to sign an authorization for the provider to give your own records to you. An authorization for disclosure of medical records is typically used when you ask the provider to send records to someone else, such as another doctor, an attorney, or an insurer. Oregon law describes information an authorization should identify, including the records, the sender, the recipient, the purpose, and an expiration date or event. See Oregon Revised Statutes 192.556 and 192.566.

What are the response deadlines and copying fees?

For Oregon Medical Board licensees, the Oregon Medical Board record request timeframe is a reasonable period, no longer than 30 days after receipt. That rule applies to those licensees; it should not be assumed to describe every type of provider or facility. For HIPAA-covered entities, the federal access deadline is generally 30 calendar days. A covered entity may take one additional 30-day extension when necessary, but it must notify you in writing within the initial 30 days, explain the reason for the delay, and give the date it expects to complete the request. See OAR 847-012-0000 and HHS guidance on access-request deadlines.

Fees depend on which rules apply and what you request. Under the Oregon Medical Board rule, a licensee may charge reasonable copying costs, including up to $30 for 10 or fewer written pages, 50 cents per page for pages 11 through 50, and 25 cents per additional written page. The rule also allows certain other costs, such as postage or the actual cost of reproducing films, X-rays, or other non-written records. A patient cannot be denied a copy because they cannot pay. These amounts are specific to the rule and should not be treated as a universal fee schedule for every Oregon provider.

HIPAA separately limits fees for copies provided under its access right to reasonable, cost-based charges for permitted copying-related expenses. Ask for an estimate before agreeing to a format or service that could involve additional charges. HHS explains the federal fee limits in its Right to Access guidance.

When can providers disclose ultrasound records without authorization?

A provider may use or disclose records without your authorization in circumstances permitted or required by law. Common examples include sharing relevant information with another provider for treatment, using information for payment or healthcare operations, and complying with certain legal requirements or court orders. Oregon law expressly permits specified treatment, payment, and healthcare operations disclosures without authorization. See ORS 192.558 and HHS’s Summary of the HIPAA Privacy Rule.

There are also limited circumstances in which information may be shared with a family member or other person involved in your care, such as when you agree or, in certain situations, cannot provide authorization and the provider determines disclosure is in your best interests. Other exceptions may apply to public health reporting, safety threats, or disclosures required by law. The applicable exception and the information shared depend on the circumstances; a provider should not treat these exceptions as permission for unrestricted disclosure.

If you are asking a provider to send your records to a third party, the provider may require a signed authorization that identifies the recipient and the information to be sent. You can ask the provider which form it accepts and whether you can limit the request to the ultrasound report and images.

Ready to simplify HIPAA compliance?

Join thousands of organizations that trust Accountable to manage their compliance needs.

Get Started Free Today

How can patients request a correction to an ultrasound record?

Send a medical record amendment request to the provider that maintains the record. Identify the ultrasound and the specific information you believe is inaccurate or incomplete, explain what you believe is correct, and include relevant supporting details. The provider may have a form or require a written request and a reason. Keep a copy of the request and any response.

Under HIPAA, a covered entity generally must act on an amendment request within 60 days. If it cannot meet that deadline, it may take one additional 30 days after giving you a written explanation and an expected completion date within the original 60-day period. If the provider accepts the request, it must amend or link the record appropriately and make reasonable efforts to notify relevant parties that may rely on the information. See 45 C.F.R. § 164.526.

A provider may deny a request on certain grounds, including if it determines the information is accurate and complete. If it denies your request, it must provide a written explanation and give you an opportunity to submit a statement of disagreement for inclusion with the record. A correction process does not necessarily erase the original entry; it can document the correction while preserving the record’s history.

Where are salivary gland ultrasound records held?

Records may be held by the imaging center that performed the ultrasound, the hospital or clinic where it took place, the ordering provider, or more than one organization. A patient portal may show the report or other results, but it may not contain every image or related document. If you are unsure who the healthcare provider record custodian is, ask the ordering clinician where the scan was performed and which department handles record requests.

The Oregon Medical Board does not keep patient medical records, and there is no central state repository for them. If a physician’s practice has closed and you cannot locate the records, the Board says it may have a records-storage address on file. Contact the provider organization first, then consult the Board’s patient records guidance if needed.

What can patients do if access or amendment is denied?

If a provider does not respond or denies access, ask the records department or privacy officer for the decision in writing, the reason for it, and the process for review or complaint. If the denial concerns only part of the record, ask whether the remaining responsive information can be provided. Some HIPAA access denials may be reviewed by a licensed health professional who did not make the original decision.

If you believe a HIPAA-covered provider or business associate violated your access or privacy rights, you may file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. The OCR complaint page explains how to submit one. If the matter involves an Oregon Medical Board licensee, you may also review the Board’s complaint process.

If an amendment request is denied, you can use the provider’s written explanation to decide whether to submit a statement of disagreement or pursue a complaint. Keep the request, denial, and related communications together. In short, identify every organization holding the ultrasound, make a specific written request, track the applicable deadline and reasonable copying costs, and use the available review or complaint process if the provider does not honor your rights.

FAQs

Can I get a copy of my salivary gland ultrasound report in Oregon?

Generally, yes. You can request the report and, if you want them, the ultrasound images from the provider or imaging center that holds them. Specify which materials you want and your preferred format. Limited legal exceptions may apply.

How long does an Oregon provider have to respond to a medical record request?

For Oregon Medical Board licensees, the applicable rule requires compliance within a reasonable time, no longer than 30 days. HIPAA-covered entities generally have 30 calendar days and may use one additional 30-day extension if they provide the required written notice during the initial period.

Can an Oregon provider withhold my ultrasound records over an unpaid bill?

No. A covered provider may not deny your HIPAA access request because you have not paid for healthcare services. The Oregon Medical Board also says its licensees may not withhold records because of an outstanding bill or inability to pay, although reasonable copying costs may apply.

How do I request a correction to an inaccurate ultrasound record?

Send a written medical record amendment request to the provider that maintains the record. Identify the specific error, explain the correction you are seeking, and include supporting information. If the request is denied, the provider must explain the decision in writing and give you an opportunity to submit a statement of disagreement.

Share this article

Ready to simplify HIPAA compliance?

Join thousands of organizations that trust Accountable to manage their compliance needs.

Get Started Free Today

Related Articles